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I . INTRODUCTION 



An expanding field of interest in computer science is 
that of software engineering. It is important to the 
development of software systems that critical work be done 
early in the design of software systems. Therefore the 
development of a functional specification is of great 
importance to the design effort. Berzins [Ref. 1] 
developed a formal language SPEC for writing black-box 
specifications for components of software systems in the 
functional specification stage of software development. To 
increase the readability of this code a software tool was 
designed to format SPEC. This thesis centers on the design 
and implementation of a language dependent pretty printer 
for the SPEC language. 

A. OBJECTIVES 

The main objective of this thesis is to design and 
implement a language dependent pretty printer to format 
SPEC. Appendix A [Ref. 2] contains a listing of the grammar 
for SPEC language. The code for the pretty printer is 
written as an attribute grammar. This code is then compiled 
using Kodiyak. The output of the Kodiyak compiler is the 
executable code for the pretty printer to format SPEC. 
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Additionally, it is desired that the pretty printer 
code be easy to read and change. Since this is a research 
project code efficiency is not as important as code 
readability. It is essential that the pretty printer code 
operate correctly and that other researchers can understand 
and modify the code. 

The final objective is to try and take what is learned 
in this implementation, abstract it, and develop guidelines 
for a language independent pretty printer using Kodiyak and 
attribute grammars. These general guidelines are a direct 
result of the insight gained from the design and 
implementation of one pretty printer using Kodiyak and 
attribute grammar. 

B. RESEARCH QUESTIONS 

There are two research questions for this thesis. 
First, what are the underlying issues and decisions that 
must be made in the design and implementation of a language 
dependent pretty printer? Once these issues are identified 
what is their impact on readability, ease in modifying, 
portability and efficiency? 

Second, can a language independent pretty printer be 
developed from the methodology used in this thesis in the 
development of the language dependent pretty printer? Is 
the implementation regular enough to abstract general rules 
and guidelines or is the implementation based on many 
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special cases and no general rules and guidelines are 
possible? 

C. SUMMARY OF FINDINGS 

The final output from the research conducted in this 
thesis is the implementation of a working language dependent 
pretty printer. Though it may not be optimally efficient it 
works correctly and the code is readable. Appendix B 
contains the pretty printer code listing and Appendix C 
[Ref. 3] contains sample input and output for the pretty 
printer . 

Additionally, from the work done in the development of 
the pretty printer a set of general guidelines is developed 
for the design of a language independent pretty printer 
generator. This generator will need a preprocessor. Output 
of the preprocessor is transmitted to the Kodiyak compiler 
with the output from the compiler an executable code for the 
pretty printing of the language defined by the input to the 
preprocessor . 

D. ORGANIZATION OF STUDY 

Chapter II lays the theoretical framework for the 
design and implementation of the pretty printer. The 
details of attribute grammars, Kodiyak, pretty printers and 
SPEC are discussed. These four areas are heavily used in 
Chapter III and Chapter IV. Readers unfamiliar with these 
subjects will find this chapter necessary. 
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Chapter III explains the design questions and design 
decisions that are made in this implementation. 
Additionally an explanation of the attributes used to create 
the pretty printer are outlined. The final subject in this 
chapter is the general and specific rules for the pretty 
printer. A user of the pretty printer code needs only a 
working knowledge of the general rules. A person who is 
going to modify the pretty printer or wants more details 
will find the specific rules define the operation of the 
pretty printer. 

Chapter IV covers the conclusions of this thesis. The 
conclusions address the issues of the specific 
implementation and how this implementation can be extended 
to generate a language independent pretty printer generator. 
The lessons learned in the design of the language dependent 
pretty printer are abstracted to produce guidelines for the 
future development of a language independent pretty printer 
generator using Kodiyak and attribute grammar. 
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II. BACKGROUND THEORY 



This chapter lays the theoretical framework for the 
design and implementation of the pretty printer. In this 
chapter details of the following four subject areas will be 
discussed : 

(1) Attribute grammars 

(2) Kodiyak 

(3) Pretty printer 

(4) SPEC 

Chapter III and Chapter IV of this thesis draw heavily 
on developments in these four areas. Readers unfamiliar 
with these subjects will find this chapter necessary. 

A. ATTRIBUTE GRAMMARS 

A grammar consists of a finite set of nonterminal 
symbols, a finite set of terminal symbols, a set of 
production rules and a start symbol. A language defined by 
a grammar is a set of strings consisting only of terminal 
symbols that can be generated by the grammar. [Ref. 4:p. 81] 
A nonterminal symbol is defined as a variable or a syntactic 
category [Ref. 5:p. 77]. A terminal symbol is defined as a 
symbol that can appear only on the right-hand side of a 
production rule [Ref. 6:p. 97] or as a primitive symbol of 
the language [Ref. 5:p.77]. 
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An attribute grammar is an extension of a context-free 
grammar whose generated language includes syntax and 
semantics. A context-free grammar (CFG) is a four tuple G = 
(N,T,P,S) where N is the set of nonterminals, T is the set 
of terminals,* P is the set of production rules and S is the 
start symbol [Ref. 4:pp. 84-85]. The syntactic part of the 
attribute grammar is typically a context-free grammar and 
the semantic part consists of a set of attributes 
associated with each symbol and a set of semantic functions 
used to evaluate the attributes' values in term of the 
syntactic tree [Ref. 7:p. 331]. 

The attributes provide a means for expressing data flow 
in the derivation tree. They are associated with the node 
in the derivation tree and represent inputs and outputs of 
the nodes. The attributes of each node in the tree can be 
defined in terms of the attributes of neighboring nodes. 

An important feature of an attribute grammar is that 
some of the attributes are defined for nonterminals that 
appear on the right side of the corresponding production 
rule, while other attributes are defined when the 
nonterminal appears on the left side of the corresponding 
production rule. This implies there are two types of 
attributes. First, a synthesized attribute is based on the 
attributes of the descendants of the nonterminal symbol. 
Second, an inherited attribute is based on the attributes of 
the ancestors. Synthesized attributes are always evaluated 
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from the bottom up in the tree structure, while inherited 
attributes are always evaluated from the top down in the 
tree structure. [Ref. 8:p. 130] 

Figure 2.1, from Knuth, shows an example of an 
attribute grammar which gives a precise definition of binary 
notation for numbers. This binary notation is based on the 
definition of the context-free grammar (as listed in the 
left column of Figure 2.1). The terminal symbols are 
"0" and "1". The nonterminal symbols are "B", "L" and "N" 
representing respectively bit, list of bits and number. A 
binary number is intended to be any string of terminal 
symbols which can be obtained from "N" by application of the 
production rules listed in the context-free grammar. [Ref. 
8 : pp . 127-130] 



Syntactic Rules 



Semantic Rules 



B -> 0- 
B -> 1 
L -> B 
LI -> L2B 

N -> L 

n -> LI . L2 



v ( B ) = 0 
v ( B ) = 2**S ( B ) 

v ( L ) = v ( B ) , s ( B ) = s ( L ) , 1 ( L ) = 1 
v ( LI ) = v ( L2 ) + v ( B ) , S ( B ) = s ( LI ) 
s(L2) = s ( LI ) + 1, 1 ( LI ) = 1 ( L2 ) + 1 
v (N) = v(L) , s (L ) =0 
v ( N ) = v ( LI ) + v ( L2 ) , s ( LI ) = 0, 
S(L2) = -1 ( L2 ) 



Note: "**" symbolizes exponent 

LI, L2 are subscripted 

Figure 2.1 Binary Notation Example 
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The right-hand column of Figure 2.1 represents the 
semantic rules. The semantic rules define all the 
attributes of a nonterminal in terms of the attributes of 
its immediate descendants. Values are ultimately assigned 
for each attribute. The three attributes used in this 
example are "v" for value, "1" for length and "s" for 
scale. Figure 2.2 gives an example of the association 
between attributes and nonterminals. Figure 2.3 lists the 
synthesized attributes and the inherited attributes for this 
example. [Ref. 8:p. 130] 



Each B 


has 


a 


"value" 


v(B) which 


is 


a rational number. 


Each B 


has 


a 


"scale" 


s ( B ) which 


is 


an integer. 


Each L 


has 


a 


"value" 


v ( L ) which 


is 


a rational number. 


Each L 


has 


a 


"length' 


1 1 ( L ) which 


l is 


an integer. 


Each L 


has 


a 


"scale" 


s(L) which 


is 


an integer. 


Each N 


has 


a 


"value" 


v(N) which 


is 


a rational number. 


Figure : 


2.2 


Nonterminals with Assigned Attributes 



Synthesized Attributes 


Inherited Attributes 


v(B) 


s ( B ) 


v(L) 


S(L) 


1 ( L ) 




v ( N ) 




Figure 2.3 Synthesized/Inherited Attributes 



The semantic rules may be used to give a "meaning" to 
strings of the context-free language. For any derivation of 



a terminal symbol "t" from "S" (the start symbol) by a 
sequence of production rules the derivation tree is 
constructed. Then the attributes of this derivation tree, 
or parse tree, are evaluated. This process of attribute 
definition, which can occur in any order, is applied 
throughout the tree until no more attribute values can be 
defined. The defined attributes at the root of the tree 
constructed give the "meaning" (or desired answer or output) 
of that derivation tree. [Ref. 8:pp. 132-133] 

Any attribute grammar can be composed of both 
synthesized and inherited attributes. Semantic rules that 
do not use inherited attributes can be considerably more 
complicated (along with being harder to understand and to 
manipulate) than semantic rules which allow both kinds of 
attributes. Synthesized attributes alone are sufficient to 
define any function of the derivation tree but, in 
practice, using both types of attributes leads to 
simplifications. [Ref. 8:p. 134] 

Appendix A [Ref. 2] lists the context-free grammar used 
in SPEC. No attributes are listed in this grammar. 
Appendix B lists the entire language Spec including the 
attributes for the pretty printer. 

B . KODIYAK 

The Kodiyak compiler is essential to the implementation 
of this pretty printer. A complete understanding of Kodiyak 
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is not necessary for the user of the pretty printer but an 
implementor will be interested in the details. The 
following is a summary of the major points of Kodiyak with 
an emphasis on what is used in the actual code of the pretty 
printer. It covers the following topics: 

(1) Description of Kodiyak 

(2) Format 

(3) Output procedures 

(4) Using Kodiyak 

All of the points covered in the following section come 
directly from The Incompleat AG User's Guide and Reference 
Manual [Ref. 9:pp. 2-25]. The following is a synopsis of 
the major points of this manual, enough to understand the 
code for the pretty printer but not all the details. If 
further or more detailed information is needed consult the 
user's guide mentioned above. 

1 . Description of Kodiyak 

Kodiyak is a language designed for constructing 
translators. It is modeled after Knuth's description of 
attribute grammars. The Kodiyak translator accepts a 
context-free grammar along with attribute declarations and 
equations, a scanner specification, and output declarations, 
and generates an executable translator. 

2 . Format 

The Kodiyak program is divided into three sections. 
The first section describes the features of the lexical 
scanner. The second section names the attributes 
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associated with each grammar symbol and declares their 
types. The third and final section describes the grammar 
and attribute equations which define the semantics of the 
translation. The sections are separated by the unique 
symbol double percent symbol ("%%") which is located on a 
line by itself. 

a. Lexical Scanner Section 



Each 


statement 


in 


the first 


section 


of 


the 


Kodiyak program 


describes 


the 


terminal 


symbols 


of 


the 



translation in some way. The two functions of this section 
are first, to specify the correspondence between the 
terminal symbols of the grammar and the input text, and 
second, to specify a set of operator precedences to be used 
in conjunction with the grammar. 

The lexical scanner section defines the set of 
substitutions to be performed on the input text. These 
substitutions are carried out using regular expressions. 
Input is scanned for text that matches these regular 
expressions. If a match is found then the corresponding 
text is deleted and replaced with the associated named 
terminal symbol (the symbol that occurs on the left-hand 
side of the regular expression). 

Figure 2.4 shows examples of regular 
expressions. An explanation of the symbols will assist in 
understanding this terminology. The colon indicates 
that a regular expression follows. The bar ("|") indicates 
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an OR. The symbol "Backslash" is a symbolic constant 
representing the "\" character. The input string "MOD" or 
the symbol "Backslash" is replaced by the atomic terminal 
symbol "MOD". The asterisk ("*") is an indication of zero 
or more repetitions. This means that the symbol {Blank}* 
represents zero or more instances of the symbolic constant 
"Blank". The plus sign ("+") is very similar to the 
asterisk except that it means one or more. The square 
brackets ("[", "]") mean an OR operation of the items inside 
of the brackets. Therefore [a-zA-Z] means one letter of the 
alphabet. The curly brackets ("{","}") are used to invoke 
substitution. The caret is used to mean everything 
except what follows it. Therefore [ ~"\\] means everything 
except the quotation mark or a backslash. 



COMMENT : "--".*"\n" 

AND : " & " 

MOD : {Backslash} | MOD 

: { Blank }+ 

NAME : [Letter} {alpha}* 

%define Char :{[~ "\\ ] | {Backslash} {Quote} } 
%define Letter : [a-zA-Z] 

%define Int : {Digit}+ 

%define Digit : [0-9] 

%define Quote : ["] 

Figure 2.4 Regular Expressions 

Another way to write regular expressions is 
also illustrated in Figure 2.4. It is a shorthand or 
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abbreviated way to write a regular expression. This second 
method uses "%define" as the first symbol in the regular 
expression. Either format can be used with regular 
expressions and they both can appear in the code at the same 
time. There are three important rules about regular 
expressions that must be remembered to prevent errors. 
First regular expressions can occur on one line only. They 
may never extend beyond one typed line. Second, regular 
expression substitution may not be used outside of the 
regular expression section of the lexical scanner. Third, 
each regular expression must be defined before it can be 
used . 

b. Attribute Declaration Section 

The attribute declaration section of the 
Kodiyak program names the attributes associated with each 
grammar symbol and declares their types. In this version of 
the Kodiyak program the attribute declarations for all 
nonterminals and named terminals are the only statements 
that may be present in this section. Future versions of 
Kodiyak may include other features. 

Kodiyak supports two primitive data types for 
the attributes. They are integers and strings. All simple 
mathematical functions are available for use with the 
integers (i.e., addition, subtraction, multiplication, 
division). The size (minimum or maximum value) of the 
integers will be machine dependent. Strings can be of any 
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length with the only associated function being 
concatenation. String constants are denoted by enclosing 
the string in double quotes. Any special characters must be 
preceded by the " \" symbol. Figure 2.5 shows an example of 
integers and strings and how they are declared. 



renames { 

indent : string; 
str_value : string; 
bcursor : integer; 
padding : string; 
ecursor : integer; 

} 

Figure 2.5 Integer and String Declaration Example j 

Kodiyak also supports higher order types called 
maps which can be used as symbol tables. These will not be 
discussed here since they are not used by this 

implementation of the pretty printer. 

Named terminal symbols are permitted to have 
user-defined attributes as well as two special predefined 
attributes %text and %line. They are initialized to the 
text of the terminal symbol matched and the line number of 
the input text that the match text occurred on 

(respectively). The attribute %text is used in the pretty 
printer but the attribute %line is not. 

c. Grammar and Attribute Equation Section 

The third and final section of the Kodiyak 
program describes the grammar and attribute equations which 
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define the syntax and the semantics of the translation. The 
left-hand symbol of the first rule of the grammar section is 
taken to be the start symbol. The start symbol may not 
appear on the right hand side of any rule. 

An attribute value is named by naming the 
grammar symbol associated with it, a period and the 
attribute. The grammar symbol may be named in one of three 
ways. The simplest (if there are no repeated grammar 
symbols in the production) is use the name of the symbol. 
If that grammar symbol appears more than once then further 
distinction must be made. In this case, the name is taken 
to refer to the left-most occurrence of the grammar symbol. 
To name a grammar symbol which is not the left-most instance 
of that grammar symbol, the name may be indexed by a number 
in square brackets denoting which occurrence is desired. 
The left-most occurrence of the symbol is numbered one, the 
next left-most two, the next left-most three, etc. These 
first two ways are used by the pretty printer. The third 
way is with the use of the dollar sign ("$") followed by 
the numerical position of the grammar symbol in the 
production. This is not used by the pretty printer. Figure 
2.6 gives examples of naming attributes. 

All of the functions/operators available for 
the integer and strings are shown in Figure 2.7. These 
functions include arithmetic, string manipulation, 
relational operators and logical operators. The left-hand 
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column of Figure 2.7 shows the symbol and the right-hand 
column provides the meaning of that symbol. 



expr : 

expr '+' UNUMBER 

{ 

$$. value = $1. value + s2i($3 .%text ) ; 

} 

expr : 

expr '+' UNUMBER 

{ 

expr. value = expr [ 2] .value + s2i (UNUMBER . %text ) ; 

} 

expr : 

expr '+' UNUMBER 

{ 

expr [ 1 ] .value = expr[2] .value + 

s 2 i ( UNUMBER [ 1 ] . % t ext ) ; 

} 



Figure 2.6 Naming Attribute Examples 



+ 


addition 


* 


multiplication 


- 


subtraction 


/ 


division 


*■ 


concatenation 


[ ] 


concatenation 


< 


less than 


> 


greater than 


== 


equal 


<> 


not equal 


< = 


less than or equal 


> = 


greater than or equal 


Sc Sc 


and 


Note this a partial 


list showing just the operators 


used in this implementation. 


Figure 2.7 


Available Operators 
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One final note about attribute equations 
concerns the if-then-else statement. The symbology is a 
little different from more programming languages. There are 
no keywords "if", "then" or "else" but only the symbols "- 
>" and "#". For example, "IF A THEN B ELSE C" is written "A 
- > B # C" . Figure 2.8 shows a typical if-then-else 
statement. The expression to the right of the "=" is the 
"if". The expression to the right of the is the 
"then" and the expression to the right of the "#" is either 
the "else" or "else_if" part. 



IF THEN ELSE EXAMPLE 

comment [ 1 ]. str_value = comment [ 1 ]. bcursor <= 0 
- > [ COMMENT . %text , comment [ 2 ] . st r_value ] 

# [ "\n" , COMMENT. %text, comment [2] .str_value] ; 

IF THEN ELSE_IF EXAMPLE 

comment [1] .str_value = comment [ 1 ]. bcursor <= 0 
- > [ COMMENT . %text , comment [ 2 ] . str_value ] 

# comment[ 1 ]. bcursor + len ( COMMENT. %text) >= 80 
-> [ "c" , COMMENT. %text , comment [ 2 ] . str_value] 

# ("\n" , COMMENT. %text , comment [ 2] .str_value] ; 

Figure 2.8 If Then Else Statement 
3 . Output Procedures 

To get any output from the Kodiyak program, such as 
the pretty printer does, the program must include a special 
side-effecting procedure. The side-effecting procedure with 
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its associated equations can only be used by the start 
symbol. There are five of these procedures available in 
Kodiyak and they are introduced by a percent symbol, 
followed by the name of the procedure and the arguments 
surrounded by parentheses. The pretty printer only uses one 
of the procedures, named "%output". Figure 2.9 gives a 
short description of the procedure as well as an example. 



%output ( val : string ) 


val is written to the standard output 




EXAMPLE 


start 


comment spec 
{ 

%output ( [comment . str value, 
spec.str_value] ) ; 
comment . bcursor = 0; 

} 


Figure 


2.9 Output Procedure Example 



4 . Using Kodiyak 

The Kodiyak compiler creates and processes many 
files among them are files which are processed by Yacc, by 
Lex and by the C compiler. There are also two predefined 
files that the Kodiyak compilation depends on. The first is 
the Kodiyak library which contains functions for creating 
the parse tree, evaluating attributes, concatenating 
strings, creating pairs, etc. This file is usually not 
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modified by the user. In this implementation this file is 
named kmain.c. 



The second file is the library. This file is a set 
of C functions. This is where the user can add any new 
functions for the Kodiyak's use. In this implementation the 
function SPACES was added to the end of the file named 
kclib.c. The file itself has information on how to add 
functions . Note this is the only place available for the 
user to add his own functions. Creating a separate file and 
compiling it separately will cause syntax errors. 

The command to invoke the Kodiyak is "k sample. k". 
The file that handles everything (i.e., the driver of the 
software) is the file k. The name of the file to be 
compiled is sample. k in this case. Files to be compiled 
should have the extension ".k" or the compiler may not 
accept it. Kodiyak programs may also have one other 
extension ".m4" but that was not used in this 
implementation . 

If the program compiles without errors, the 
resulting object file (executable code) will be in the file 
named "sample". This is the name of the file submitted 
without the extension. Otherwise some cryptic error 
messages may be printed. Some common errors (as well as the 
type of error message printed and "what to do" ) are listed 
in Figure 2.10. There is also a set of options available to 
assist in debugging. The options are typed on the same line 
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but immediately after the "k sample. k". Figure 2.11 shows 
the options available. 



ERROR 



1 . syntax error - which are mostly typing errors 

2. missing attribute evaluation rules and 
circular evaluation rules 

3. table overflow errors 

4. memory storage exceeded 

MESSAGE PRINTED OUT 

1 . an associated line number with the symbol 
that has the syntax error 

2. pair of grammar rules the parent of the error 
rule and the error rule 

3. statement "table overflow need more space" 

4. statement "exceeded memory space" 

WHAT TO DO 

1 . find the typing mistake 

2. look for a missing attribute evaluation rule in 
the parent rule 

3. increase table size allotted 

4. increase memory space for given variable 



Figure 2.10 Common Errors in Kodiyak 



One final note about error messages. The first 
character of any identifier name should usually be ignored. 

They are tacked on by the Kodiyak compiler to avoid naming 
conflicts between Lex, Yacc, C and Kodiyak library routines. 
As an example, if the error message printed 
"ucomment .padding is undefined" this should be read as 
"comment .padding is undefined". 
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-h Print out a list of legal options. 

file Read input from "file" rather than the standard 
input 

-e Continue attribute evaluation even after an 

error occurs. This is useful when debugging 
attribute definitions. 

-1 Print out all tokens as they are scanned. 

-y Print out all grammar rule reductions as they 

occur . 

-L Turn on LEX's debugging features. 

-Y Turn on YACC's debugging features. 

-c Generate a core image when a run-time error 

occurs 

-s Print out storage statistics after all 
attribute evaluations is completed. 

-o file Divert the standard output to "file". 



Figure 2.11 Options List 



C. PRETTY PRINTER 

A pretty printer is a software tool used to format 
programs to make them easier to understand and read. It 
takes character strings, called tokens, from an input source 
and prints them with aesthetically appropriate spacing and 
line breaks. The input is usually a text file or a parse 
tree. The two primary functions of the pretty printer are 
to insert spaces and linefeeds between tokens and to 
determine where and how to break lines. [Ref. 10 :p. 119] 
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A syntax-directed pretty printer is a pretty printer 
that knows the syntax of a programming language and formats 
programs based on that knowledge. The syntactic structure 
and flow of control of pretty printed programs are made 
clear because the output medium shows the indentation and 
line breaks. [Ref. 10:p. 119] 

A syntax-directed pretty printer may be either language 
dependent or language independent. A language dependent 
syntax-directed pretty printer is written for a specific 
language. Since all constructs in the language are known, 
the pretty printer traditionally has been written as a large 
switch or case statement (for languages like Pascal and 
Lisp) . If any changes are made to the language the code 
for the pretty printer must be revised. [Ref. 10:p. 120] 

The language independent syntax-directed pretty printer 
is designed to be used for any language. In this case no 
knowledge of any particulars of a language are used in 
constructing the pretty printer. This version of a pretty 
printer must be given information about a language to 
produce a pretty printer for that language. In the long run 
it is easier and quicker to write one language independent 
pretty printer that can be used over and over again then to 
code a new pretty printer for each specific language that is 
to be pretty printed. [Ref. 10 :p. 120] 

For either type of syntax-directed pretty printer there 
are common issues that must be addressed. Issues such as 
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where to add spaces and linefeeds, where to break a line, 
how to handle comments and what to do about syntax errors 
must be handled with great care [Ref. 10 :p. 121]. The 
pretty printer developed in this thesis is a language 
dependent syntax-directed pretty printer (referred to 
throughout this thesis as a language dependent pretty 
printer). The generalization of this implementation is 
discussed and general rules for a language independent 
syntax-directed pretty printer are developed but are not 
implemented . 



D. SPEC 

SPEC is a formal language for writing black-box 
specifications for components of software systems. SPEC 
uses the event model to define the black-box behavior of 
proposed and external systems. Black-box specifications are 
developed for the external interfaces of the system in the 
functional specification stage of software development, and 
for the internal interfaces in the architectural design 
stage. Discussion of the event model and the SPEC language, 
extracted from [Ref.lrpp. 3.1-3.15], follows. Appendix A 
[Ref. 2] contains a listing of the grammar for the SPEC 
language. 

1 . The Event Model 

In the event model, computations are described in 
terms of events, modules and messages. An event occurs 
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when a message is received by a module at a particular 
instant of time. A module is a black box that interacts 
with other modules only by sending and receiving messages. 
A message is a data packet that is sent from one module to 
another module. 

Modules can be used to model external systems such 
as users and peripheral hardware devices, as well as 
software components. A module has no visible internal 
structure. The behavior of a module is specified by 
describing its interface. The interface of a module 
consists of the kinds of events that can occur at the module 
along with its response to each kind of event. Each kind of 
event corresponds to a different of incoming message. Each 
response consists of the later events directly triggered by 
a given initial event. 

Any module accepts messages one at a time, in a 
well-defined order that can be observed as a computation 
proceeds. Message transmission is assumed to be reliable. 
Messages can have arbitrarily long and unpredictable 
transmission delays. The order of messages arriving is 
normally not under control of the designer. 

In the event model each module has its own local 
clock. The local clocks of different modules are not 
necessarily synchronized with each other. Each event occurs 
at a well-defined instant of time, which is the time at 
which the destination module receives a message, according 
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to its own local clock. The length of time between two 
events is precisely defined if both events occur at the same 
place. The length of time between two events at different 
locations can be estimated in terms of two readings of the 
same clock, but this is only an approximation because of 
unpredictable message delays in obtaining remote clock 
readings. The only kind of time interval meaningful in the 
event model is the duration between two events. There is no 
way to distinguish between computation delay and 
communication delay in the event model. 

Each message has a sequence of zero or more data 
values associated with it. The other attributes of a 
message are its name, its condition and its origin. All of 
these attributes are single valued. Exceptions are modeled 
as messages by means of a condition attribute, which can 
take on the values "normal" and "exception". The condition 
of a message expressing a normal request for service is 
"normal". The condition of a message reporting an abnormal 
event somewhere is "exception", in which case the name of 
the message is the name of an exception condition. 

The response of a module to a message is completely 
determined by the sequence of messages received by the 
module since it was created. A module is mutable if the 
response of the module to at least one message it accepts 
can depend on messages that arrived before the most recent 
incoming message. A module is immutable if the response of 
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the module to every possible message is completely 
determined by the most recent incoming message. Mutable 
modules behave as if they had internal states or memory, 
while immutable modules behave like mathematical functions. 
A module is immutable if and only if it is not mutable. 

Each module has the potential of acting 
independently, so that there is natural concurrency in a 
system consisting of many modules. Since events happen 
instantaneously and the response of a module is not 
sensitive to anything but the sequence of events at the 
module, the event module implies concurrent interactions 
with a module cannot interfere with each other at the level 
of individual events. This non-interference must be 
guaranteed by implementations which require a finite time 
interval to trigger the responses to an event. The response 
of a module is under the control of the designer. 

In modeling concurrent systems it is sometimes 
necessary to specify atomic transactions. Atomic 
transactions are non-interruptible sequences of events at a 
module. Once a module starts an atomic transaction, it 
cannot accept any messages that are not part of the 
transaction until it is complete. Atomic transactions are 
sometimes needed to specify non-interference between 
concurrent sets of activities involving chains of multiple 
events at the same module. Atomic transactions must be used 
with care because they can lead to deadlocks if the 
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protocols of the modules involved in a transaction are not 
compatible with each other, and can lead to starvation if a 
transaction goes on forever. 

Modules can be used to model current and 
distributed systems, as well as systems consisting of a 
single sequential process. The event model helps to expose 
the parallelism inherent in a problem, because the only time 
orderings specified are those which are unavoidable and are 
agreed on by all observers. 

Events can be triggered at absolute times. Such 
events are called temporal events. Temporal events are the 
means by which modules can initiate actions that are not 
direct responses to external stimuli. Formally a temporal 
event occurs when a module sends a message to itself at a 
time determined by its local clock. Unless explicitly 
stated otherwise, there may be an unpredictable delay 
between the time when the message is sent and the time when 
it is received, just like for any other message. 

2 . The SPEC Language 

The SPEC language uses first order logic for the 
precise definition of the desired behavior of modules. The 
Spec language provides a means for specifying the behavior 
of three different types of modules: 

(1) Functions 

(2) State machines 

( 3 ) Types 
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Each of these types of modules is described in the 
following pages along with examples of each type of module, 
a. Functions 

Function modules are immutable and calculate 
functions on data types, where "function" is interpreted as 
in standard mathematics. Usually function modules provide 
only a single service and hence accept anonymous messages. 
Figure 2.12 gives an example of the specification for a 
square root function. 



FUNCTION square_root{ precis ion: real} 

WHERE precision > 0.0 

MESSAGE (xtreal) 

WHEN x > = 0.0 
REPLY ( y : real ) 

WHERE y >= 0.0 & approximates (y*y,x) 

OTHERWISE REPLY EXCEPTION imaginary_square_root 

CONCEPT approximates (rl r2:real) 

— True if rl is a sufficiently accurate 
— approximating of r2. 

— The precision is relative rather than absolute 
VALUE (b: boolean) 

WHERE b<=> abs ( ( rl - r2)/r2) <= precision 

END 

Note: introduces a comment and all keywords in 

Spec appear in all capital letters 



Figure 2.12 Function Example 



b. State Machines 
A machine is a 
i.e., machines are mutable 



module with an internal state, 
modules. Figure 2.13 shows an 
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example of a machine. The behavior of the machines is 
described in terms of a conceptual model of its state, 
rather than directly in terms of the messages that arrived 
in the past, because descriptions in terms of such a 
conceptual model are usually shorter and easier to read. 



MACHINE inventory 

— assumes that shipping and supplier are other modules 
STATE ( stock :map(item, integer) ) 

INVARIANT ALL ( i : item :: stock [ 1 ] >= 0) 

INITIALLY ALL ( i : item :: stock [ 1 ] = 0) 

MESSAGE receive ( i : item, q: integer ) 

— Process a shipment from a supplier. 

WHEN q > 0 

TRANSITION stock[ 1 ]=*stack[ i ] + q 
— Delayed responses to backorders are not shown. 
OTHERWISE REPLY EXCEPTION empty_shipment 

MESSAGE order ( io : item, qo : integer ) 

— Process an order from a customer. 

WHEN 0 < qo <= stock [io] 

SEND ship (is: item, qs: integer) TO shipping 
WHERE is = io, qs = qo 
TRANSITION stock [io] + qo = *stock[io] 

WHEN 0 < qo > stock [io] 

SENt) ship (is: item, qs: integer) TO shipping 
WHERE is = is, qs = stockfio] 

SEND back_order (ib:item, qb: integer) TO supplier 
WHERE ib = io, qb + qs = qo 
TRANSITION stock [io] = 0 
OTHERWISE REPLY EXCEPTION empty_order 
END 



Figure 2.13 Machine Example 



c. Types 

A type module defines an abstract data type. 
An abstract data type provides many services therefore the 
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messages of a type module usually have a name. An abstract 
data type consists of a set of instances and a set of 
primitive operations involving the instances. The instances 
are the individual data objects belonging to the type. The 
instances of an abstract data type are black boxes. The 
properties of the instances are not visible directly, and 
can only be observed and influenced by means of the 
primitive operations. The properties of an instance are 
determined by the primitive operation that created the 
instance and the sequence of primitive operations applied 
after it was created. 

Date types are either mutable or immutable. 
For immutable types the set of instances and the properties 
of each instance are fixed. Operations producing instances 
of the type are viewed as selecting members of this fixed 
set. Figure 2.14 is an example of an immutable abstract 
data type. 

The state of a mutable data type consists of a 
set of instances which have internal states. The initial 
state of a mutable type is an empty set of instances. 
Mutable types have operations for creating new instances, 
and usually also operations that can change the properties 
of an instance once it has been created. An example of a 
mutable abstract data type with immutable instances is the 
set of unique identifiers for the objects in a database. 
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TYPE rational 

INHERIT equality {rational} 

MODEL (num den: integer) 

INVARIANT ALL ( r : rational :: r . den ~= 0) 

MESSAGE ratio (num den: integer) 

WHEN den ~= 0 
REPLY (r: rational) 

WHERE r.num = num, r.den = den 
OTHERWISE REPLY EXCEPTION zero_denominator 

MESSAGE add ( x , y : rational ) OPERATOR + 

REPLY (r: rational) 

WHERE r.num = x.num*y .den+y .num*x.den, 
r.den = x.den*y.den 

MESSAGE multiply (x y: rational) OPERATOR * 

REPLY (r: rational) 

WHERE r.num = x.num*y.num, r.den = x.den*y.den 

MESSAGE equal (x y: rational) OPERATOR = 

REPLY ( b : boolean) 

WHERE b <=> (x.num*y.den = y.num*x.den) 

END 

Figure 2.14 Immutable Abstract Data Type 



An instance of a mutable data type is very 
similar to a state machine, except that the state machine is 
implicitly created at the start of the computation, while 
the instances of a mutable data type are created as a 
computation proceeds. A state machine has exactly one 
instance, while a mutable data type can have any number of 
instances. Figure 2.15 is an example of a specification of 
a mutable data type. 
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TYPE queue (trtype) 

INHERIT mutable {queue} 

— Inherit definitions of the concepts new and defined. 
MODEL (e: sequence) 

-The front of the queue is at the right end. 

INVARIANT tue 

--Any sequence is a valid model for a queue. 

MESSAGE create 

— A newly created empty queue. 

REPLY (q : queue {t} ) WHERE q.e = [] 

TRANSITION new(q) 

MESSAGE enqueue (x:t, q:queue{t}) 

— Add x to the back of the queue. 

TRANSITION q.e = append([x], *q.e) 

MESSAGE dequeue (q:queue{t}) 

— Remove and return the front element of the queue. 
WHEN not_empty (q) 

REPLY ( x : t ) 

TRANSITION *q.e = append (q.e,[x]) 

OTHERWISE REPLY EXCEPTION queue_underflow 

MESSAGE not_empty (q:queue{t}) 

--True if q is not empty. 

REPLY (b:boolean) WHERE b <=> (q.e ~= []) 

END 

Figure 2.15 Mutable Abstract Data Type 
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III. DESIGN AND IMPLEMENTATION 



The actual design and implementation for the pretty 
printer was motivated not only on the specific application 
to this particular language but also by the desire to 
generalize the solution to apply to other languages. It is 
highly desirable that what is learned from this particular 
case can be extended to the design of a language 
independent pretty printer. 

A. DESIGN QUESTIONS 

A language dependent pretty printer is a software tool 
to increase the readability and understandability of a 
specific formal language. In this light the design 
questions must be centered around increasing both the 
readability and understandability of Spec (the language used 
in this application) . 

One important constraint related to this specific 
application must be considered carefully. The Kodiyak 
compiler cannot be changed. There are provisions to add 
features to the compiler but the overall design and 
implementation of the Kodiyak compiler is fixed. Therefore 
any design decisions must not require any modifications to 
the Kodiyak compiler itself. 
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1 . Specific Design Issues 

There are five considerations specific to this 
implementation that must be addressed. They are: 

(1) Length of each line 

(2) Standards for indentation 

( 3 ) Token length 

( 4 ) Comments 

(5) Keywords 

a . Line Length 

The length of the line defines the maximum 
number of characters that can be printed on any given line. 
This length can be chosen regardless of the width of the 
output medium but must permit the maximum number of 
characters to all be printed within the output medium's 
width. Depending on the implementation this can be either a 
global constant or an input parameter. 

b. Indentation 

Indentation, as applied to computer programs, 
groups together lines of related code. An example in the 
English language of indenting is a formal outline. There 
are major topic headers. Under each major topic header is 
subtopic headers with each subtopic being subdivided 
(depending on how detailed the outline is). Figure 3.1 is 
an example of a simple formal outline. 

As Figure 3.1 shows indentation makes the 
structure easy to see. Related items all start at the same 
distance from the left margin. As the number of 
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subdivisions grow the longer the indentation (relative to 
the left margin) . 



I. Introduction 

a. Software engineering 

1. General introduction 

b. Functional specification 

1. Nonformal 

2. Formal 

(a) Spec Language 
II. Background 

a. Attribute grammar 

1. Definition 

2. Purpose/role 

3. Attributes in general defined 

(a) Synthesized 

(b) Inherited 

b. Kodiyak 

1. Definition 

2. Format 

3. Semantics 



Figure 3.1 Sample Outline 



In computer programs how much to indent related 
lines is an important question. Using too many spaces for 
indenting can easily run lines of code off a page. On the 
other hand not using a wide enough indent does not show the 
structure of the code and decreases readability. A 
compromise must be made between readability and losing lines 
of code off a page. The standard for program code is 
between two and five spaces for indenting each subdivision 
of related lines of code. 
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c. Token Length 

Token length is the actual length of any token 
used in the language. One assumption that should be made is 
that no token is longer than the maximum number of 
characters allowed on one line. 

d . Comments 

Comments are added to provide documentation to 
the code and also explain what the code is actually doing. 
Therefore it is extremely helpful to have comments disbursed 
among the lines of code. For readability comments should 
not appear between code segments that are on the same line. 
The particular language implemented will specify the 
allowable placement of comments and how the comments are 
identified . 

e. Keywords 

The final consideration is keywords. Does the 
language contain keywords? If so, how are they to be 
distinguished? Are they unique (i.e., reserved) or can the 
programmer use a language keyword with a totally different 
meaning? Do keywords have special format? Some of the 
possibilities are: 

(1) all capitalized with the rest of the code lowercase 

(2) all capitalized with the rest of the code a 
combination of lowercase and uppercase 

(3) underlined 

(4) proceeded by a special character 
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2 . General Design Issues 

When considering the specific questions generic 
rules should also be a consideration. Can this specific 
implementation be easily modified to handle different/slight 
modifications? For example if the line length is increased 
will this radically effect the software or is it a very easy 
change? Additionally, can more features be added if 
desired? Can debugging aids be added to the already 
existing software? Will any modifications still be 
compatible with the existing software? Will added features 
effect the original code causing a revision? If these added 
features cause the original code to be revised, how much 
work is involved and are the added features worth the added 
work? 

B. DESIGN DECISIONS 

The decisions that were made for this specific 
implementation concern the questions raised in the previous 
pages. They are: 

(1) Length of a line 

(2) Token length 

(3) Indentation 

( 4 ) Comments 

(5) Keywords 

1 . Length of Line Decision 

The length of the standard line for this 
implementation is 80 characters. It makes no difference 
whether the output from the pretty printer is printed on 8 
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1/2" paper or the wider 14" paper. This print out will fit 
on either size of paper which allows for more flexibility in 
what printer and paper is used. The only drawback to this 
decision is that if the wider paper is used the right 5 1/2" 
of the paper will not be utilized. 

2 . Indentation Decision 

The standard indentation is always three blank 
characters. As each sentence in the language is subdivided 
(broken down into the grammar rules) the indentation is 
expanded by an additional three blank characters. Three is 
a fairly reasonable number between the standard, in computer 
science, two and five spaces. It allows the reader's eyes 
to see what sentences and parts of sentences are all related 
at the same level. Additionally, there is not too much 
indenting (i.e., using five blank characters) so that if a 
lot of subdividing (or recursion) occurs the indenting will 
not run the print out off the page. 

3 . Token Length Decision 

One necessary assumption made by this 
implementation is that the token length for any token will 
not exceed the maximum line length. Any token greater than 
80 can never be printed with the restriction placed on this 
implementation. If the line length is increased then the 
maximum token length can also be increased. 
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4 . Comment Decision 



Comments are allowed to be one line or multiple 
lines long. Comments can come at the end of a line of code 
filling the space until the right-hand margin is reached, or 
can be one line long starting at the left-hand margin, or 
can extend over several lines with each new line flush with 
the left-hand margin. 

The one restriction on a comment is that it is 
always started with a special character and its total 
length (including the special character) is less than or 
equal to the line length. For this implementation the 
special character to introduce a comment is " — ". 

For a comment extending beyond the line length it 
must be broken up into two lines each starting with a 
special character. If this is not done by the user part of 
the comment may be lost when it is printed. It is important 
to emphasize that it is the user's responsibility to insure 
that comments are not longer then 80 characters since this 
pretty printer implementation assumes a single comment will 
fit on one line (80 characters or less). 

For output the special comment character is always 
followed by one blank character. If a comment comes at the 
end of a line of code the pretty printer will place two 
blank characters before the special character. If the 
comment starts a new line there will be no proceeding blank 
characters. Figure 3.2 shows examples of comments. 
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— This comment is a single line comment. 

expression = exp + exp — Comment following code i 

expression = exp + exp — Comment following code 
-- but this time code extends more than one line. 

-- This is a sample of a multiline comment with 
-- the first line being flush with the left margin. 

Figure 3 . 2 Comment Examples 
5 . Keyword Decision 

All keywords in the output are capitalized. In 

this implementation there are three types of keywords. The 

importance of these three types will be explained in more 

detail later. Figures 3.3, 3.4 and 3.5 show the three 

types of keywords. All three categories of keywords are 
typed in all uppercase letters with the difference coming in 
the indentation rules related to the keywords. 

C. ATTRIBUTE DEFINITIONS 

The design of the pretty printer centers around the 
selection of attributes. The goal of the design is to 
create a software package that produces a formatted output 
that is readable and reflects the structure of the original 
code. The format of the input must be irrelevant to the 
pretty printer. It must also be noted that the input must 
be syntactically correct for the pretty printer to operate 
correctly . 



1 . 
2 . 
3. 

4 . 
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FUNCTION 


ITERATOR 


END 


TEMPORAL 


MACHINE 


EXCEPTION 


TYPE 


THEN 


DEFINITION 


ELSE 


INSTANCE 


ELSE IF 


INHERIT 


VALUE 


HIDE 


DO 


RENAME 


IF ! 


IMPORT 


TRANSACTION 


FROM 


INITIALLY 


EXPORT 


INVARIANT 


MESSAGE 


STATE 


WHEN 


MODEL 


OTHERWISE 


CONCEPT 


CHOOSE 


FOREACH 


REPLY 


SUCH 


GENERATE 


TRANSITION 


SEND 


VIRTUAL 


TO 


WHERE 




Figure 3.3 General Keywords 



TIME 


ALL 


DELAY 


SOME 


PERIOD 


NUMBER 


ALL 


SUM 


PRODUCT 


SET 


MAXIMUM 


MINIMUM 


UNION 


INTERSECTION 


NANOSEC 


MICROSEC 


MILLISEC 


SECONDS 


MINUTES 


HOURS 


DAYS 


WEEKS 


OPERATOR 





Figure 3.4 Expression Keywords 
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AS 

OD 

FI 

Figure 3.5 Special Keywords 

The attributes will define the language dependent 
pretty printer. There should be as few attributes as 
possible with each limited to one specific function 
therefore making each very limited in scope. All the 
attributes can be one of two types: synthesized attributes 

or inherited attributes. Synthesized attributes are based 
on the attributes of the descendants of the nonterminal 
symbol. Inherited attributes are based on the attributes of 
the ancestors. Synthesized attributes are evaluated from 
the bottom up in the tree structure, while inherited 
attributes are evaluated from the top down. [Ref. 8:p. 130] 

The pretty printer will need values for the print head 
position, lengths of symbols, values for indenting and the 
actual string that will be printed. With these ideas in 
mind this implementation utilizes six attributes as shown in 
Figure 3.6. 

The type of attribute, the type of value the attribute 
is and a definition (with examples if necessary) of each 
attribute follows. Remember that each attribute has one 
unique purpose which is very limited in scope. 
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ATTRIBUTE 



DEFINITION 



bcursor 

ecursor 

padding 

indent 

str_value 

length 



beginning cursor position 
end cursor position 

blank spaces to pad beginning of line 

indentation 

string value 

number of characters long 



Figure 3.6 Pretty Printer Attributes 



1 . Bcursor 

Bcursor is short for beginning cursor position. It 
is the column position at which the left-most character of a 
production rule will be printed. This is an inherited 
attribute with an integer value. As the print head moves 
across the paper from left to right the value of bcursor 
will increase from one to the maximum line length (in this 
implementation maximum line length is 80). Figure 3.7 shows 
examples’ of bcursor. 

2 . Ecursor 

Ecursor is short for end cursor position. It is 
the column position at which the right most character of a 
production will be printed. This is a synthesized 
attribute with an integer value. This attribute can range 
in value from one to the maximum line length (in this 
implementation line length is 80). The ecursor of any rule 
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is the bcursor of the next rule in the parse tree. Figure 
3.7 shows the interplay between bcursor and ecursor. 



action_list 

: EXCEPTION parametrized_name 

{ 

parametrized_name.bcursor=action_list .bcursor+10 (* ) ; 
action_list. ecursor = parametrized_name . ecursor ; 

) 

message_header 

: optional_exception optional_name formal_arguments 

{ 

opt ional_exception. bcursor = message_header . bcursor ; 
opt ional_name . bcursor = optional_exception. ecursor ; 
formal_arguments .bcursor = optional_name . ecursor ; 
message_header .ecursor = formal_arguments .ecursor; 

) 

( * ) 10 is the number of characters in the word 
EXCEPTION plus one 

Figure 3.7 Bcursor and Ecursor Examples 



3 . Padding 

Padding is short for necessary blank spaces to pad. 
It is a string of blank spaces to put at the beginning of a 
new line when the current line must be split because it is 
longer than the maximum line length. This is an inherited 
attribute with a string value of blank characters. The 
value of the attribute can range from zero blank characters 
to the maximum line length. Figure 3.8 shows an example of 
the implementation of the padding attribute. 
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instance 

: optionally_virtual INSTANCE parametrized_name = 
parametrized_name comment hide renames END 

{ 

parametrized_name[ 1 ] .padding = 

[ spaces ( optionally_virtual . ecursor ) , spaces ( 9 ) ] ; ( * ) 
parametrized_name[ 2] .padding = 
parametrized_name[ 1 ] .padding; 
hide. padding = hide. indent; 
renames .padding = renames . indent ; 

) 

(*)spaces(9) is a function that produces a string of nine 
blank characters 



Figure 3.8 Padding Example 



4 . Indent 

Indent is short for indentation. It is a string of 
blank characters associated with each nonterminal symbol of 
the same production rule. At each level of nesting the 
number of blanks associated with the value of the attribute 
indent increases by three. This is an inherited attribute 
with a string value. The string value for indent is the 
number of blanks associated with a nonterminal symbol. The 
length of the string can range from zero to the maximum 
length of line (in this case it also has to be a multiple of 
three so the maximum value would be 78). This allows all 
related lines to be easily seen and to maintain the 
structure of the code. Figure 3.9 shows an example of how 
the indent attribute is used. 
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function 

: optionally_virt interface messages concepts 

{ 

optionally_virt . indent= [ function . indent , spaces ( 3 ) ] ( * ) ; 
interface . indent = [ function . indent , spaces ( 3 )](#) ; 
messages . indent = [ function . indent , spaces ( 3 )] ; 
concepts . indent = [ function. indent , spaces ( 3 )] ; 

} 



(*)"[" and "]" are symbols to represent string 
concatenation of all values between the two symbols 



(#)spaces(3) is a function producing a string of three 
blank characters 

Figure 3 . 9 Indent Example 



On the surface it appears that indent and padding 
are very similar and could be combined. This is not the 
case. Indent has a length that is always a multiple of 
three, a forced linefeed occurs with every indent and indent 
is only used with keywords. Indent is designed to show the 
nesting levels of all symbols from the same production. 
Padding, on the other hand, can range in length from zero to 
the maximum line length, linefeeds are optional and is used 
only to assist in lines that are too long to fit on one 
line. Padding is designed to format long lines keeping all 
text of the long line grouped together. Figure 3.8 shows 
the interplay between the two attributes padding and indent. 
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5 . Sir value 



Str_value is short for string value. The output of 
the pretty printer is the str_value attribute of the start 
symbol at the root of the parse tree. It is the set of 
terminal symbols derived from a production rule together 
with spaces and linefeeds for formatted output. This is a 
synthesized attribute with a string value. The length of 
str_value can be of any value from zero to infinity. The 
str_value of the start symbol will have the longest length. 
Concatenation is used to put different str_value attributes 
together. Figure 3.10 shows an example of the concatenation 
of strings to obtain a value for str_value. 



definition 

: DEFINITION interface concepts END comment 

{ 

definition. str_value = ["\n", definition. indent , 
"DEFINITION ", interface . str_value , 
concepts . str_value, "\n" , "END", comment . str_value , 
' "\n" , "\n" ] ; 

) 

Figure 3.10 Str_value Example 



6 . Length 

Length is short for number of characters long. It 
is the number of printable characters in a given production 
rule. It is a synthesized attribute with an integer value, 
which is used to determine if an expression will fit on the 
remainder of the current line. Length is important because 
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it counts the actual number of characters ignoring possible 
padding, carriage returns, or line feeds. It is utilized by 
the expression production rule and production rules that 
have comment as one of their nonterminal symbols. Figure 
3.11 shows examples of the attribute length. 



expression 

: ' $ ' expression 

C 

expression[ 1 ]. length = 1 + expression[ 2 ]. length; 
expression[ 2 ] . bcursor = expression[ 1 ] . bcursor + 1 + 
expression[ 2 ]. length <= 80 
-> expression[ 1 ]• bcursor + 1 
# len( expression!; 1 ] .padding) + 1; 



Figure 3.11 Length Example 



D. PRETTY PRINTER RULES 

The language dependent pretty printer has only a few 
general rules of interest to the user of the pretty printer. 
For an implementor or someone who wants to know more details 
about the pretty printer, the specific rules define the 
behavior of the pretty printer in detail. 

1 . Rules for Using the Pretty Printer 

There are several general rules for the use of this 
pretty printer. First the input must be syntactically 
correct. If it is not correct the software will print out a 
syntax error message (it may or may not print out any of the 
input data). Figure 3.12 shows an example of what happens 
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when the pretty printer is supplied with syntactically 
incorrect code. 



! 

i 

1 : 


MACHINE 

''Syntax error 


Note : 


1 is the line number of the error 
~ points to the point the syntax error 
was detected 


Figure 


3.12 Syntactically Incorrect Code 

Output Example 



Secondly, the input can come from either a file or can 
be typed from the terminal. The input code can be in any 
format provided its syntax is correct. For most 
applications it seems quite reasonable for the user to 
already have a file created. It is extremely time consuming 
to manually enter the code each time, not to speak of the 
likelihood of typing mistakes which will force the user to 
start over again. It is highly recommended that the input 
come from a file. 

The pretty printer is invoked in one of two ways. The 
first method is by typing the file name of the compiled Spec 
code followed by a file name with a set of options. The 
possible options that are available are shown in Figure 3.13 
[Ref. 9 : pp . 23-24]. 

The second method to invoke the pretty printer is to 
type the file name of the compiled Spec code, a carriage 
return and then manually enter all of the code for the 
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input from the keyboard. When finished type "control d" and 
the output will appear at the standard output. Figure 3.14 
shows an example of executing the pretty printer with both 
of the methods described. The name of the compiled Kodiyak 
code for the pretty printer is stored in the file printer 
and the name of the input file is SAMPLE (when one is 
specified). An explanation of the different commands 
invoked follow Figure 3.14. 



-h Print out a list of legal options. 

file Read input from "file" rather than the standard 
input 

-e Continue attribute evaluation even after an 

error occurs. This is useful when debugging 
attribute definitions. 

-1 Print out all tokens as they are scanned. 

-y Print out all grammar rule reductions as they 

occur . 

-L Turn on LEX'S debugging features. 

-Y Turn on YACC's debugging features. 

-c Generate a core image when a run-time error 
occurs 

-s Print out storage statistics after all 

attribute evaluations is completed. 

-o file Divert the standard output to "file". 

Figure 3.13 Printer Options 
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A 

printer SAMPLE 
B 

printer SAMPLE -o OUTPUT 
C 

printer -h 
D 

printer SAMPLE -y 

E I 

printer 

Figure 3.14 Invoking the Code Example 

Part A invokes the pretty printer using the input file 
SAMPLE and the formatted output will be printed to the 
standard output. Part B invokes the pretty printer using 
the input file SAMPLE and the formatted output will be sent 
to the file OUTPUT. Part C invokes the pretty printer but 
in this case a list of the options that are available will 
be printed. The list printed is similar to Figure 3.13. 
Part D invokes the pretty printer using the input file 
SAMPLE but in this case it will print out all grammar rule 
reductions as they occur. This may assist in diagnosing 
syntax errors. Part E invokes the pretty printer with the 
input coming from the terminal. The user must type in the 
necessary code followed by a "control d" to exit. Output 
will go to the standard output. 
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2 . Rules for Implementing the Pretty Printer 

The above section looked at the general rules for 
the successful operation of the pretty printer. Those are 
the only rules the user needs to know to use the pretty 
printer. An implementor or someone who may want to know 
more details will be interested in the specific rules for 
the pretty printer. There are four specific implementation 
rules. These rules with their guidelines and exceptions 
explain the complete operation of this language dependent 
pretty printer. The four rules that will be explained in 
detail deal with: 

(1) Keywords 

(2) Terminal symbols 

(3) Nonterminal symbols 

( 4 ) Comments 

a. Keyword Rule 

Keywords are special reserved words in Spec. 
All keywords are capitalized. All the other tokens in the 
language can use uppercase or lowercase letters or a 
combination of the two, but all keywords are distinguished 
by the use of all uppercase letters. Also as noted earlier 
there are three types of keywords: 

(1) General keywords 

(2) Expression keywords 

( 3 ) Special keywords 

The rule for general keywords states the output 
consists of a carriage return, line feed, current 

production rule indenting and then the keyword. The rule 
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for expression keywords states that these symbols are to be 
treated exactly the same as a terminal symbol. See the 
following section for the terminal symbol rule. 

All special keywords appear after a general 
keyword. RENAME always proceeds AS, IF always proceeds FI 
and DO always proceeds OD. For these special keywords the 
rule states if room allows the special keyword will appear 
on the same line as the general keyword otherwise the 
special keyword will appear directly beneath the general 
keyword (on the following line) at the same degree of 
indentation. 

The exceptions to the above three rules are few 
but are extremely important to the pretty printer. First, 
only the first general keyword is effected by the rule for 
general keywords when two general keywords appear one after 
the other. This saves an unnecessary carriage return and 
line feed. Second, all three rules are ignored when any 
type of a keyword directly follows a terminal symbol. In 
this case the rule for that keyword type will be followed 
only if the keyword will not fit on the current line. 
Figure 3.15 summarizes the three keyword rules and the 
exceptions to these keywords rules, 
b. Terminal Rule 

A terminal symbol is defined as a symbol that 
can appear only on the right side of a production rule [Ref. 
6 : p . 97] or as a primitive symbol of the language [Ref. 5:p. 
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77] (i.e., cannot be reduced any further). Keywords by this 
definition are terminals but in this implementation keywords 
are considered a separate category of symbols. 



RULE 1 

The rule for a general keyword states the output 
consists of a carriage return, a line feed, an 
associated production rule indentation and the 
keyword (with the keyword all in capital letters). 

RULE 2 

Expression keywords are treated like terminal 
symbols. (See terminal symbol rule). 

RULE 3 

All special keywords follow a general keyword. 

The special keyword appears on the same line as the 
general keyword if room permits; otherwise, the 
special keyword will appear directly beneath the 
general keyword at the same degree of indentation 

EXCEPTIONS 



When two general keywords appear in a row only the 
first general keyword follows the rule for general 
keywords. This rule is ignored by the second keyword. 

2 . 

When any keyword appears after a terminal symbol 
all three rules are ignored. The rules are only 
followed if the keyword will not fit on the current 
line. 

Figure 3.15 Keyword Rules and Exceptions 



In this implementation there are two types of 
terminal symbols. They are constant length terminal symbol 
(CL terminal) and variable length terminal symbol (VL 
terminal). The CL terminal symbols (those with symbol 
values different from their symbol names) are shown in 
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Figure 3.16 and the CL terminal symbols (those with the same 
symbol name and value) are shown in Figure 3.17. The VL 
terminal symbols involve the use of the built in attribute 
%text. The six VL terminal symbols along with the way they 
appear in the language are shown in Figure 3.18. 



Name 


value 


Name 


Value 


AND 


Sc 


IFF 


< = > 


OR 


1 


NOT 


~ 


IMPLIES 


= > 


LE 


< = 


GE 


> = 


NE 


~= 


NLT 


~< 


NGT 


~> 


NLE 


~< = 


NGE 




EQV 


= = 


NEQV 


~= ! 


RANGE 




APPEND 


| | 


ARROW 


-> 


MOD 


\\ 


EXP 


** 


BIND 





Figure 3.16 CL Terminal Symbols 

Symbol values Different from Symbol Name 



The terminal symbol rule checks for the end of 
line. When a terminal symbol (either kind) is encountered 
an end of line check is done. This length check is to see 
if the maximum line length will be exceeded if the terminal 
symbol is added to the str_value. This general rule for 
terminal symbols can be divided into two cases depending on 
the value of the length check sum. If this length check sum 
is less than or equal to the line length than the value of 
the production rule attribute str_value is the value of the 
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terminal symbol (depending on the terminal symbol it may be 
concatenated with one blank character). If the length check 
sum is greater than 80 then the value of the production rule 
attribute str_value is the concatenation of a carriage 
return, line feed, production rule padding and the value of 
the terminal symbol (depending of the terminal symbol it may 
be concatenated with one blank character). 





< 


( 


> 


) 


+ 




* 


c 


/ 


) 


U 


7 


] 


$ 


[ 


@ 


i 


# 


MOD 


IN 




Figure 3.17 


CL Terminal Symbols 



Symbol Name Same as Symbol Value 



Terminal Symbol Name 


Appearance in Code 


NAME 


NAME . %text 


INTEGER-LITERAL 


INTEGER-LITERAL . %text 


REAL-LITERAL 


REAL-LITERAL . %text 


CHAR-LITERAL 


CHAR-LITERAL . %text 


STRING LITERAL 


STRING-LITERAL . %text 


COMMENT 


COMMENT . %text 


Figure 3.18 


VL Terminal Symbols 
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The length check sum is computed in one of two 
ways depending upon which production rule is being used. If 
the terminal symbol (either kind) is not part of an 
expression production than the length check sum is the sum 
of the current cursor position, the length of the terminal 
symbol and one (for a blank space). Otherwise, if the 
terminal symbol (either kind) is part of the expression 
production rule then the length check sum includes the sum 
of the current cursor position, the length of the terminal 
symbol value, one (for a blank character) and the length of 
the symbol or symbol to the right of the terminal symbol in 
the production rule. Figure 3.19 summarizes the general 
rule for the terminal symbols along with the rules for 
calculating the length check sum. 

There are three exceptions to the terminal 
symbol rule. First when a nonterminal symbol (a symbol that 
can be reduced) precedes a VL terminal symbol (which 
precedes a CL terminal symbol), the length check sum 
includes the length of the VL terminal symbol as well as the 
CL terminal symbol. 

The second exception to this rule is when CL 
terminal symbols appear in pairs. The only CL terminal 
symbols this exception applies to are the right and left 
parenthesis and the right and left square bracket. The 
right parenthesis and the right square bracket do not cause 
a check for the end of line. 
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The general rule when encountering a terminal symbol 
(both CL & VL) is to do a check for the end of the line. 



LENGTH CHECK SUM <= 80 

str_value = terminal symbol value (may have one blank 
character at end) 

LENGTH CHECK SUM >80 

str_value = [carriage return, line feed, production 
rule padding, terminal symbol value] 

(may have one blank character at end) 



TERMINAL SYMBOL PART OF EXPRESSION PRODUCTION RULE 
length check sum = current cursor position + 

length of terminal symbol + 
(possibly one for blank space) 



TERMINAL SYMBOL NOT PART OF EXPRESSION PRODUCTION RULE 
length check sum = current cursor position + 

length of terminal symbol + 
length of rule(s) to the rule of 
the terminal symbol + 

(possible one for blank space) 



Figure 3.19 Terminal Symbol Rule and Length Check 
Sum Calculation 



The third exception occurs when a comment 
immediately precedes a terminal symbol (either kind). A 
check is first done to see if a comment exists. If a 
comment does not exist the general rule is followed, 
otherwise the production rule str_value includes a carriage 
return, line feed, production rule padding and the value of 
the terminal symbol (depending on the terminal symbol may 
include one blank character). Figure 3.20 outlines the 
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three exceptions to the general rule. Figures 3.21 and 3.22 
show examples of the terminal symbol rule and exceptions . 



1 . Nonterminal symbol proceeding a VL terminal 

symbol (with the VL terminal symbol proceeding 
a CL terminal symbol) 

length check sum = current cursor position + 

length of the VL terminal symbol + 
length of the CL terminal symbol + 
one (blank between terminal 
symbols ) 



2. CL terminal symbols appearing in pairs 
(applies to ")" and " ]" only) 

These two symbols do not cause a end of line check 



3. Comment immediately precedes a terminal symbol 

If comment does not exist follow general rule 
else 

str_value = [carriage return, line feed, 
production rule padding, 
terminal symbol value] 

(possibly one blank character 



Figure 3.20 Terminal Rule Exceptions 



c. Nonterminal Rule 

The rule for nonterminal symbols is the easiest 
of all the rules. A nonterminal symbol in a production rule 
will specify the value of all attributes that its own 
production rule needs and those values of the attributes 
that its children's production rules may need. Depending on 
which nonterminal symbol is involved any or all of the six 
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A. Length check with expression production 

expression 

: NOT expression 

C 

expression[ 1 ] . str_value = expression[ 1 ] . bcursor + 

1 + expression[ 2] .length <= 80 
-> expression[2] . str_value] 

# [ "\n" ,expression[ 1 ] .padding, , 

expression[ 2] .str_value] ; 

} 

B. Length check without expression production 
f ield_list 

: field_list ' , ' field 

C 

f ield_list [ 1 ] . str_value = 

field_list[ 2 ]. ecursor + 2 <= 80 
-> [ field_list[ 2 ] . str_value, " , ", field . str_value] 

# [ field_list [ 2 ] . str_value, " , ", "\n", 

field_list [ 1 ] .padding, field . str_value] ; 

} 

C. Length check with first exception 
expression 

: expression ' . ' NAME 

( 

expression[ 1 ] . str_value = expression]; 2 ]. ecursor + 
1 + len ( NAME%text ) <=80 
-> [expression[ 2] .str_value, " . " , NAME . %text ] 

# [ expression[ 2 ] .str_value, ".","\n", 

express ion [ 1 ] . padd ing, NAME. % text] ; 

} 

Figure 3.21 Terminal Symbol Examples 
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A. Length check with second exception 

actual_parameters 

: ' ( ' arg_list ' ) ' 

( 

actual_parameters . str_value = 

actual_parameters .bcursor + 1 < 80 
-> arg_list . str_value, " ) " ] 

# [ "\n" , actual_parameters .padding, 

arg_list . str_value, "}" ] ; 

} 

B. Comment before terminal symbol 
concept 

CONCEPT formal_pa ' : ' type_spec 

concept . str_value = formal_pa . ecursor < 0* 

-> [ "\n" , "\n" , concept . indent, CONCEPT, 

formal_pa.str_value, "\n" , forma_pa . padding , 
" , type_spec . str_value] 

# formal_pa . ecursor + 2 <= 80 

-> [ "\n" , "\n" , concept . indent, CONCEPT, 

formal_pa . str_value , " : ", 
type_spec. str_ v alue] 

# [ " \n " , " \n " , concept . indent , CONCEPT , 

formal_pa . str_value , "\n" ,forma_pa. padding, 
" , type_spec . str_value] ; 

) 



Figure 3.22 Terminal Symbol Examples 
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attributes that this implementation uses can be specified. 
Not all of the nonterminal symbols use all of the six 
attributes. Figure 3.23 shows some examples of how 

attributes are used with the nonterminal symbols. In the 
first example in Figure 3.23 the nonterminal symbol 
"name_list" only needs two attributes and "comment" needs 
only one attribute. In the second example in Figure 3.23 
the nonterminal symbol "interface" does not need or use the 
attribute indent but the nonterminals "imports", "inherits" 
and "export" need indent therefore the parent is passing 
along its value of indent to its children, 
d . Comment Rule 

The rule for a comment concern where a comment 
can and cannot be placed. This rule is language dependent. 
In Spec comments can occur after any nonterminal symbol but 
comments cannot occur immediately after any terminal symbol. 
See Figures 3.16, 3.17 and 3.18 for the list of CL terminal 
symbols and values and VL terminal symbols. There are two 
exceptions to this rule. First, a comment can occur after 
the CL terminal symbol that comes as the second in a pair 
(i.e., ")" and "]" ) when the production rule that involves 
the CL terminal symbol does not have a nonterminal symbol 
immediately following the CL terminal symbol. Second, a 
comment cannot occur immediately after a keyword. Figure 
3.24 summarizes the comment rule and its two exceptions. 
Note this is strictly dependent on the language implemented. 
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A nonterminal symbol will specify the value of all 
attributes that its own production rule needs and 
those attributes that any of its children may need. 

EXAMPLE ONE 

hide 

HIDE name_list comment 

{ 

name_list . bcursor = hide.bcursor + 5; 
name_list . padding = [hide . padding, spaces ( 5 ) ; 
comment . bcursor = name_list . ecursor ; 
hide . str_value = [ "\n" , hide. indent , "HIDE ", 
name_list . str_value , 
comment . str_value ] ; 

) 

EXAMPLE TWO 
interface 

: NAME inherits imports export comment 

inherits . indent = [ interface . indent , spaces ( 3 ) ] 
• export . indent = [ interface . indent , spaces ( 3 )] ; 
imports . indent = [ interface . indent , spaces(3)]; 
interface . str_value = [ NAME . %text , 

inherits . str_value , 
imports . str_value , 
export . str_value , 
comment . str_value ] ; 

) 



Figure 3.23 Nonterminal Rule and Examples 

l 
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A comment can occur after any nonterminal symbol but 
cannot occur immediately after any terminal symbol 
(either kind). 

EXCEPTIONS 

A. A comment can occur after the CL 

terminal symbol ")" or "]" if the production rule 
does not have a nonterminal symbol immediately 
following either of these CL terminal symbols. 



B. A comment cannot occur immediately after any 
keyword . 

Figure 3.24 Comment Rule 
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IV. CONCLUSIONS 



The conclusions of this thesis address the issues of 
the specific implementation of one language dependent 
pretty printer and how this can be extended to generate a 
general purpose language independent pretty printer. What 
was learned through the development, design and 
implementation of this pretty printer can be abstracted, 
generalized and expanded to create a language independent 
pretty printer. 

A. IMPACT OF DESIGN DECISIONS 

The major impact on any and all of the design decisions 
relates to readability, understandability , portability and 
ease in modifying. Can what was done for a single 
implementation be of any great value? The answer to this 
question - is yes. Can all the rules and exceptions be 
abstracted and extrapolated? The issues surrounding the 
design decisions made in this particular implementation and 
the ability to extend what was learned center around four 
key ideas. These four key ideas are: 

(1) Global parameters 

(2) Attributes 

(3) Standardization 

( 4 ) Comments 
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1 . Global Parameters 



In the normal sense of global parameters, such as 
in a Pascal program, this implementation does not have any 
global parameters. There is no method available to declare 
a global parameter at the beginning of the program due to 
the tree like structure that is used in parsing and 
evaluating the pretty printer. On the other hand this 
implementation does have "global parameters" to a limited 
degree. The line length and therefore the right-hand margin 
is set on 80. Any reference to the right-hand margin is 
made in reference to this global parameter. One global 
change to the value 80 (with an editor) can globally change 
the width of the print out and thereby changing the value of 
the right-hand margin. 

The global indentation change can also be easily made. 
SPACES(3) is used throughout to handle the indentation. If 
the indentation width was changed to four, for instance, one 
simple global change with an editor could change all 
SPACES ( 3 ) to SPACES ( 4 ) . 

The use of global parameters as explained above 
increases the portability of the code. Additionally, it 
increases the adaptability and ease of modification of this 
language dependent pretty printer to different users 
preferences and desires. The pretty printer code can also 
be modified to accept variable parameter values from the 
command line if the computer system utilized supports that 
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feature (i.e., printer -1 80, printer -s 4). In this case 

Kodiyak would have to be modified to support the option of 
command line inputs. 

2 . Attributes 

There are only a small number of attributes. These 
six attributes are: 

(1) Bcursor 

(2) Ecursor 

(3) Padding 

(4) Indent 

(5) Str_value 

(6) Length 

Each attribute is unique and handles one specific 
well defined function. If one attribute (or the concept 
behind it) is changed or altered the other attributes will 
not be affected. This is true for all except bcursor and 
ecursor. These two attributes go hand in hand and changing 
one will greatly affect the other. 

3 . Standards 

There is standardization of the implementation 
throughout the entire code for the pretty printer. With a 
given number of general rules and a few exceptions the 
implementation follows a fairly standard organization (i.e., 
each production rule is basically implemented in the same 
way). With standardization of rules generic rules can 
easily be derived from the specific rules. 

In addition to standardization in the pretty 
printer code, there are also standards in computer science 
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that are adopted by the implementation. This includes the 
rule of thumb standard for the length of the standard 
indentation unit. 

4 . Comments 

Allowing for freedom of style in comments allows 
comments to be almost any place within the code. Comments 
add tremendously to the overall readability of program code. 
The implementation allows for the widest variety of comments 
within reason. Within reason means that there are times 
when you do not want a comment. As an example a comment is 
not a good idea in the middle of a mathematical expression. 

B. EVALUATION OF THE PRETTY PRINTER 

The qualities of the pretty printer deal with the 
software, documentation and devices used in the actual 
development and execution of the pretty printer. The 
qualities to be concerned with center around the following 
three categories: 

(1) Kodiyak compiler 

(2) Syntax errors 

(3) Software extensions 

1 . Kodiyak Compiler 

The Kodiyak compiler is a complex piece of software 
but when modifications were made there was no apparent 
change in the efficiency and no slow down in the processing 
time. To make a change to the compiler one of its many 
related files (as shown in Figure 4.1) was modified and then 
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the compiler was recompiled. Recompiling is a small 
sacrifice when making changes to an extremely complicated 
piece of software. 



NAME 



PURPOSE 



locallib . c 

man. entry 
k 

kclib . c 
kmain . c 
kodiyak .k 
kodiyak.m4 
kscript 
mac ,m4 



helper functions for the 
Kodiyak compiler 
Unix Programmer's Manual 
software driver 

library functions and C definitions 

main routine for Kodiyak programs 

Kodiyak translator 

Kodiyak translator 

executes the translator 

macros 



Figure 4.1 Kodiyak Files 



With everything that is good there are also some 
drawbacks. Changes to the compiler are easy to make, but 
sometimes it requires a change to the Kodiyak code with an 
associated recompiling of that code and other times the 
change requires a modification to the file that controls the 
overall execution of the Kodiyak compiler (file named k) . 
Figure 4.2 shows some examples of these situations with the 
resulting actions needed to correct the problems. 

Another area of concern with the Kodiyak compiler 
is the error messages generated. Understandably the Kodiyak 
code and documentation was written by one person within a 
six month time frame. Even so the error messages generated 
are hard to understand and even harder to correct. There is 
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a lack of standardization when an error had to be corrected. 
The user has to search through the multiple related files 
(those listed in Figure 4.1) to find the solution to a given 
error. Once the correction to the error has been found the 
most obvious correction may not fix the problem. 



1 . Table overflow 

Change the size of the table in file k 

2. Memory overflow 

Change the value of associated variable in 
file kclib.c 

Figure 4.2 Compiler Change Examples 

As an example consider the following. An error 

appeared that stated "OUT OF XNODESPACE" . The solution was 

found in file kclib.c. The documentation [Ref. 11] stated: 

"The following definitions may be over-ridden from the C 
compiler's command line. This allows users to increase or 
decrease the space allocated to each data type according 
to his needs. cc -DXPAIRSPACE=50000 agprog.c -o agprog 
would give the user's program 50,000 pairs to use instead 
to the 20,000 allocated by default." 

This feature did not work as advertised. After 
trial and error the solution found involved changing the 
value of XNODESPACE in two separate locations in the file 
kclib.c and then recompiling the Kodiyak compiler. That 
solution was not written anywhere or even suggested. 

2 . Syntax Errors 

Syntax errors are concerned with the errors in the 
syntax of the input code. These syntax errors can basically 
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be of two types. There are errors caused by typing mistakes 
and errors concerned with missing grammar rule(s) in the 
language. These syntax errors can be either easy or hard to 
find. 

When the Kodiyak compiler finds any type of error 
it doesn't guess what the user meant. It crashes and prints 
an error message. The difficulty involves tracking down the 
actual error. Figure 4.3 shows examples of typical error 
messages . 



1 . Spelling or typing error 

1 : MESAGE 

"Syntax error 

2. Grammar rule missing/input does not match grammar 

3: MESSAGE FUNCTION 

"Syntax error 

Figure 4.3 Typical Error Messages 

As Figure 4.3 shows the error messages can be quite 
cryptic. In all cases the error occurs somewhere after the 
place that the syntax error pointer points. The error in 
fact may be a several lines further down in the code because 
the language is parsed in a tree like structure. The error 
message pointer points to the production rule that the 
pretty printer code was parsing at the time the error 
occurred (the actual error can be a descendant of the 
production rule) . 



71 



3 . Software Extensions 



Software extensions are concerned with adding 
software to the actual Kodiyak software. The Kodiyak 
software is quite adaptable and has allowed for user defined 
functions and applications to be added to the existing 
software. The only drawback to this is that the user 
defined software must be added to the end of an already 
existing set of library functions. Through experience it 
has been determined that if the user-defined functions are 
written in a separate file and declared in an option added 
to the file k (that directs the Kodiyak) incompatibility 
error messages will appear. If the same code is placed at 
the end of the file kclib.c the Kodiyak has no problems with 
the user defined functions and everything runs smoothly. 

One additional note about the user defined 
functions. This allows the user to write any type of 
function that is desired as long as it is written is C. 
With this implementation a new function (named SPACES) was 
created to change an integer into the corresponding number 
of blank characters. Writing a fairly efficient small loop 
function seemed quite easy until the code was compiled. 
Then the problem of incompatibility arose between the 
existing code and the new function written in C. To solve 
this compatibility problem an inefficient function was 
written to handle the conversion of integers zero through 80 
to a corresponding string of blank characters. If the line 
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length is increased above 80 the function SPACES will have 
to modified to handle all integer values greater than 80. 



C. ANALYSIS OF CODE 

The analysis of the pretty printer code has to look at 
three general areas. These three areas are: 

(1) Efficiency of the code 

(2) Readability /understandability of the code 

(3) Ease of modification 

1 . Efficiency 

The efficiency of the pretty printer must not only 
look at the pretty printer code but also the Kodiyak 
compiler. The Kodiyak compiler was not written to be 
optimized. With the limited time that was used to design 
and write the code it is really amazing that it is as fast 
as it is. Figure 4.4 shows some statistics for file length 
compared with time to format and print the reformatted file. 



FILE LENGTH (bytes) 


TIME (seconds) 




70 


1.4 




151 


2.2 




457 


5.3 




819 


8.8 




1594 


18.1 




2706 


32.7 




4275 


46.8 




5428 


62.0 


The 


time should be considered in relative terms and 


not 


absolute values 






Figure 4.4 Pretty 


Printer Statistics 
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Along the same lines the pretty printer was not 
written in any optimized form. The function SPACES is not 
efficiently coded. It is efficient in time but not in 
space. The most important point is that although it may not 
be efficient it works. Figure 4.5 shows a segment of the 
SPACES function. If efficiency is an important issue this 
function can be modified to improve its efficiency. Also, 
as stated earlier, if the line length is increased this 
function will also have to be modified. 



xstring vspaces 
int lenstr; 

C 

int x; 
x = lenstr; 
switch( x ) 

{ 


( lenstr ) 




case 0 : 


return 

break; 


(xstring) 


case 1 : 


return 
break ; 


(xstring) " "; 


case 2 : 


return 

break; 


(xstring) " "; 


case 3 : 


return 


(xstring) " "; 




break; 




default 

} 

} 


: return 
break; 


(xstring) 


Figure 4.5 


Spaces 
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2 . Readability 

Readability is concerned with the user being able 
to read the code for the pretty printer and without too much 
effort understand exactly what is going on. Increasing the 
code's readability is the fact that there are only six 
attributes each with a unique function that does not change. 
Additionally, standard rules are followed and there is a 
standardization among the implementation of the production 
rules. This basically says if the user can understand one 
production rule he can probably understand the majority of 
them. There are a few special rules (and some exceptions) 
that may take the user a little longer to understand but 
overall the pretty printer is fairly straight forward. 

Since it has few attributes and only uses simple 
mathematics and string concatenation the code is fairly 
simple. Probably the most complex notation used involves 
the if-then-else and if-then-else_if evaluation rules. The 
syntax for these constructs are a little different but after 
reading through a few of them they become straightforward 
(Figure 2.8 explains the syntax). 

Since there is standardization and limited 
complexity it would appear that the pretty printer code 
should be fairly easy to read and understand. One drawback 
is by increasing readability some efficiency has been lost. 
Since this is a research project readability and 
understandability of the Kodiyak compiler and the pretty 
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printer are more important than optimization. Increasing 
optimization often decreases the readability of any code. 
The pretty printer code is fairly straight forward and very 
readable . 

3 . Ease of Modification 

For any number of reasons the existing code may be 
changed. Is this change an easy and uncomplicated 
undertaking and/or is it going to be time consuming? The 
pretty printer code consists of six attributes and simple 
mathematics. Each attribute is unique and its function or 
value does not affect other attributes (except bcursor and 
ecursor which depend on each other). Therefore changing the 
meaning of one attribute should be straight forward and easy 
to implement. To add an additional attribute (similar to 
the type already implemented) will be time consuming (typing 
time) but fairly simple. On the other hand to add an 
attribute that uses higher order functions or depends on the 
value of existing attribute values will be time consuming 
and complex (each production rule will have to be looked at 
individually ) . 

From experience the effort in making changes is 
time consuming but not very complicated. As an example, a 
modification was made in the implementation of the 
production rules (and the children of the production rules) 
using the symbol "expression". Prior to the change the end 
of line check did not include the use of the length 
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attribute. This length attribute was added to all 
production rules very easily. It was time consuming because 
of the major edit to the pretty printer code and the need to 
verify all corrections/additions were made. The change 
itself was a very simple modification. 

D. APPLICATION EXTENSION 

It is highly desirable to apply the techniques used in 
this implementation to the development of a language 
independent pretty printer. Before a generalization can be 
reached a careful analysis of the existing code must be 
completed . 

1 . Pretty Printer Code Analysis 

Chapter three covers the exact design and 
implementation in detail. Specifically four general rules 
for this pretty printer are explained along with all 
exceptions to each of the four general rules. This section 
looks at the overall development of these rules and 
generalizes the method used to apply to any language. 

Examination of the pretty printer production rules, 
looking at how each production rule symbol is implemented, 
leads to a list of generalized symbol categories. Each SPEC 
language symbol uniquely fits into one of these four 
categories (as listed in Figure 4.6). 

An analysis of the production rules of SPEC 
provides the insight into the development of the four 
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generalized symbol categories listed in Figure 4.6. Look at 
the production rules as collections of symbol categories 
instead of individual rules. In other words look at the 
production rules as combinations of keywords (all three 
types), terminals (CL and VL) and nonterminals. In this 
way generalizations can be reached. Keywords (general, 
expression and special) are listed in Figures 3.3, 3.4 and 
3.5. All the terminal symbols of the language are listed in 
Figures 3.16, 3.17 and 3.18. Review of these figures and 
the pretty printer code leads to the development of the 
general symbol categories for the production rules. Figure 
4.7 lists the production rules from the SPEC grammar 
transposed into standard forms using these symbol 
categories. Note that Figure 4.7 contains keywords (all 
three types grouped under one heading) , CL and VL terminal 
symbols and nonterminals . 



1 . 


Keyword 


2. 


Terminal 


3. 


Comment 


4 . 


Nonterminal 


Figure 4.6 General Symbol Categories 



By referring back to the implementation rules for 
the pretty printer (Figures 3.15, 3.19, 3.20, 3.23 and 
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1 . KEYWORD 

2. CL-terminal 

3 . VL-terminal 

4. nonterminal ( s ) 

5. CL-terminal VL-terminal 

6. CL-terminal nonterminal (s ) 

7. nonterminal ( s ) VL-terminal 

8. VL-terminal nonterminal ( s ) 

9. KEYWORD nonterminal ( s ) 

10. KEYWORD nonterminal ( s ) KEYWORD 
nonterminal ( s ) CL-terminal VL-terminal 

1 1 . nonterminal ( s ) KEYWORD nonterminal ( s ) 

12. KEYWORD VL-terminal nonterminal ( s ) 

13. VL-terminal CL-terminal nonterminal ( s ) 

14. CL-terminal nonterminal ( s ) CL-terminal (* ) 

15. nonterminal ( s ) CL-terminal nonterminal ( s ) 

16. CL-terminal VL-terminal CL-terminal nonterminal ( s ) 

17. CL-terminal nonterminal ( s ) CL-terminal 

nonterminal ( s ) ( * ) 

18. KEYWORD nonterminal ( s ) KEYWORD nonterminal ( s ) 

19. KEYWORD nonterminal ( s ) CL-terminal nonterminal ( s ) 

20. nonterminal ( s ) CL-terminal nonterminal ( s ) 

CL-terminal ( * ) 

21. nonterminal ( s ) CL-terminal nonterminal ( s ) 

CL-terminal nonterminal ( s ) CL-terminal (* ) 

22. KEYWORD VL-terminal nonterminal ( s ) CL-terminal 

nonterminal(s) 

23. KEYWORD VL-terminal nonterminal ( s ) KEYWORD 

nonterminal ( s ) 

24. CL-terminal nonterminal ( s ) CL-terminal nonterminal ( s ) 

'CL-terminal(*) 

25. KEYWORD CL-terminal nonterminal ( s ) CL-terminal 

nonterminal ( s ) (*) 

26. nonterminal ( s ) KEYWORD nonterminal ( s ) KEYWORD 

nonterminal ( s ) 

27. nonterminal (s ) KEYWORD VL-terminal KEYWORD 

VL-terminal nonterminal ( s ) 

28. KEYWORD nonterminal ( s ) KEYWORD nonterminals ( s ) 

KEYWORD nonterminal ( s ) KEYWORD 

29. nonterminal ( s ) KEYWORD nonterminal (s) CL-terminal 

nonterminal (s ) KEYWORD nonterminal ( s ) 



( * ) VL-terminal symbols are matched pairs (i.e., (,),[,] ) 
Figure 4.7 Standard Forms 
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3.24) more generalizations can be made. VL-terminal and 
CL-terminal are implemented exactly the same way. The 
distinction between the two symbols exists in the 
exceptions to the terminal symbol rule. Therefore CL- 
terminal and VL-terminal symbols can be combined into the 
category terminal. Figure 4.7 grouped the symbol comment as 
a nonterminal. Because comment is implemented differently 
than a nonterminal, comment needs to be in a separate 
category. None of the remaining symbols can be combined. 
This leads to the modification of the standard forms into a 
new list of standard forms as listed in Figures 4.8 and 4.9. 
It can be concluded that each production rule is a 
combination of one or more of the four general symbol 
categories (listed in Figure 4.6) repeated one or more 
times . 

2 . Language Independent Pretty Printer 

The approach used in this particular implementation 
is very regular and could be applied mechanically by a 
preprocessor. All the information that the preprocessor 
obtained would be translated and sent to the Kodiyak 
compiler. The preprocessor is responsible for the language 
dependent questions as well as any special features the user 
wanted considered for their particular implementation. 
Language dependent questions include such items as file name 
containing the grammar of the language to be pretty 
printed, keyword specifications, terminal symbols and 
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1. KEYWORD 

2. terminal (s) 

3. nonterminal ( s ) 

4. nonterminal ( s ) terminal (s) 

5. terminal(s) nonterminal ( s ) 

6. KEYWORD nonterminal ( s ) 

7. KEYWORD nonterminal ( s ) KEYWORD 

8. nonterminal ( s ) KEYWORD nonterminal ( s ) 

9. KEYWORD terminal nonterminal ( s ) 

10. terminal nonterminal ( s ) terminals ) 

11. nonterminal ( s ) terminal nonterminal ( s ) 

12. terminal nonterminal ( s ) terminal nonterminal ( s ) (*) 

13. nonterminal terminal nonterminal ( s ) terminal (*) 

14. KEYWORD terminal nonterminal ( s ) KEYWORD 

nonterminal ( s ) 

15. nonterminal (s) KEYWORD nonterminal ( s ) KEYWORD 

nonterminal ( s ) 

16. nonterminal ( s ) terminal nonterminal ( s ) 

terminal nonterminal terminal(*) 

1 7 . KEYWORD nonterminal ( s ) KEYWORD nonterminals ( s ) 

•KEYWORD nonterminal ( s ) KEYWORD 



(*)terminal symbols are matched pairs (i.e., (,),[,]) 

Figure 4.8 Standard Forms Revised 
Without Comment Symbol 
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1 . nonterminal ( s ) comment 

2. comment nonterminal ( s ) 

3. terminal(s) nonterminal ( s ) comment 

4. KEYWORD nonterminal ( s ) comment 

5. terminal nonterminal ( s ) terminal comment (*) 

6. KEYWORD nonterminal ( s ) KEYWORD comment 

7. nonterminal ( s ) terminal comment nonterminal 

8. KEYWORD nonterminal ( s ) comment nonterminal ( s ) 

9. nonterminal (s ) terminal comment nonterminal ( s ) 

comment 

10. KEYWORD terminal nonterminal ( s ) terminal comment (*) 

11. KEYWORD nonterminal comment nonterminal ( s ) comment 

12. nonterminal ( s ) KEYWORD nonterminal ( s ) KEYWORD comment 

13. nonterminal ( s ) KEYWORD nonterminal comment 

nonterminal ( s ) comment 

14. KEYWORD nonterminal KEYWORD nonterminal comment 

nonterminal ( s ) 

15. nonterminal KEYWORD terminal KEYWORD 

terminal comment 

16. KEYWORD nonterminal ( s ) terminal nonterminal 

comment nonterminal 

17. terminal nonterminal ( s ) terminal comment 

nonterminal ( s ) terminal(*) 

18. KEYWORD terminal nonterminal ( s ) terminal 

nonterminal comment terminal (*) 

19. nonterminal KEYWORD nonterminal ( s ) comment KEYWORD 

nonterminal comment 

20. nonterminal ( s ) KEYWORD nonterminal ( s ) terminal 

nonterminal ( s ) comment nonterminal ( s ) 

KEYWORD comment 

(*) terminal symbols are matched pairs (i.e., (,),[,] ) 



Figure 4.9 Standard Forms Revised 
With Comment Symbol 
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values, keyword types, paired terminal symbols, comment 
symbol, etc. The grammar file should be formatted as 
specified by the Kodiyak manual [Ref. 9:pp. 2-25]. Special 
features would include such things as the standard 
indentation, width of the paper, unusual lengths of tokens, 
left-hand margin to start at a value other than one, 
special handling for a grammar rule, etc. 

Figure 4.10 shows how the preprocessor works. The 
preprocessor could be either menu driven (asking a series of 
questions) or a command line format could be used (i.e., pp 
grammarfilename -w 120 where pp invokes the preprocessor, 
grammarf ilename is the name of the file containing the 
grammar and -w 120 states the line length is 120 
characters). This method for invoking the preprocessor 
would be system dependent. The preprocessor would take in 
all necessary data, use a set of production rule and 
generate, an attribute grammar, format the attribute grammar 
to be compatible with the Kodiyak compiler and transmit its 
data to the Kodiyak compiler which in turn would produce a 
working pretty printer for the desired language. 

The rules used by the preprocessor to generate the 
attribute grammar to be used by the Kodiyak compiler in 
generating the language independent pretty printer are very 
straight forward. Figure 4.11 shows the four rules needed 
to implement a language independent pretty printer. 
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Figure 4.10 Preprocessor 



Each production rule, for the given grammar, must 
be transformed into a set of attribute equations to produce 
the desired pretty printer code. The four language 
independent rules listed in Figure 4.11 use the same 
attributes used in the language dependent pretty printer 
implementation. Each symbol in a production rule must be 
categorized and then the associated rule for that symbol 
must be applied. 

As an example consider the production rule "X : A B 
C D" . The preprocessor first would determine the category 
for each of the four symbols in this production rule. Next 
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1 . X : Keyword 

X.str_value = if standard 

then [ "\n" , indent , keyword ] 
else if keyword fits on current line 
then [keyword] 
else [ "\n" , indent, keyword] 

X.ecursor = if standard 

then len( indent) + len( Keyword) 
else if keyword fits on current line 
then X.bcursor + len( keyword) 

else len( indent) + len( keyword) 

2. X : Nonterminal 

Nonterminal . bcursor = if (X.bcursor < 0) 
then len( padding) 
else X.bcursor 

X.ecursor = Nonterminal . ecursor 
Nonterminal .padding = X. padding 
Nonterminal . indent = [X. indent, spaces(3)] 
X.str_value = if (X.bcursor < 0) 

then [ padd ing , nonterminal . s t r_value 
else nonterminal . str_value 

3 . X : Terminal 

X.str_value = if (X.bcursor + len( terminal ) ) < END 
then terminal 

else [ "\n" , padding, terminal] 
X.ecursor = if (X.bcursor + len ( terminal ) ) < END 
then X.bcursor + len ( terminal ) 
else len (padding) + len ( terminal ) 

* if paired terminal symbol check for <= END 

END = MAXIMUM LINE LENGTH 

4 . X : Comment 

X.str_value = Comment . str_value 
X.ecursor = if len ( Comment .str_value ) > 0 
then -1 (^comment exists*) 
else +1 



Figure 4.11 Language Independent Rules 
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the four rules, listed in Figure 4.11, would be applied to 
each symbol in the production rule. Finally, a set of 
attribute equations is generated. Figure 4.12 outlines the 
details of the generation of the attribute equations for 
this example. 



PRODUCTION RULE -> 



X : A B C D 



1 . Assume A is 
C is 



2 . 

3 . 



A. str_value 
A.ecursor = 



B.bcursor = 
Nonterminal , 



Nonterminal 
Nonterminal 
B.str value 



a keyword (standard), B is a nonterminal 
a terminal, D is a comment 

= [ "\n" ,X. indent, Keyword] 
len( X . indent ) + len (Keyword) 

A.ecursor 

.bcursor = if (B.bcursor < 0) 
then len( padding) 
else B.bcursor 
.padding = X. padding 
.indent = [X. indent, " "] 

= if (B.bcursor < 0) 

then [X .padding, Nonterminal . str_value] 
else Nonterminal . str value 



C. bcursor = B.ecursor 

C.str_value = if (C. bcursor + len ( terminal ) ) < END 
then terminal 

else [ "\n" ,X. padding, terminal] 
C.ecursor = if (C. bcursor + len( terminal ) ) < END 
then C. bcursor + len ( terminal ) 
else len (X. padding) + len ( terminal ) 



5. D.str_value 
D.ecursor = 



6. X.str_value 
X . ecursor = 
Figure 4.12 



= Comment . str_value 

if len ( Comment ,str_value) > 0 

then -1 

else +1 

= [A. str_value,B. str_value,C. str_value, 
D. str_value] 

D.ecursor 

Attribute Equation Generation Example 
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In conclusion it is feasible to use Kodiyak to make 
a language independent pretty printer generator. In order 
to do this a preprocessor is needed to gather information on 
the specific language implementation and any requirements 
from the user. The preprocessor will take its gathered 
information, translate it into an attribute grammar for 
pretty printer (using rules outlined in Figure 4.11) and 
transmit the attribute grammar to the Kodiyak compiler. 
The Kodiyak compiler will produce the executable code for a 
pretty printer for the desired input language. With this 
method only one pretty printer needs to be written and 
multiple languages can be pretty printed. 
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APPENDIX A 



I version stamp SHeader: spec.k.v 1.5 88/02/16 13:27:58 berzlns Exp $ 

I In the grammar, comments go from a "I" to the end of the line. 

I Terminal symbols are entirely upper case or enclosed In single quotes ('). 

I Nonterminal symbols are entirely lower case. 

I Lexical character classes start with a captlal letter and are enclosed In {}. 
I In a regular expression, x+ means one or more x's. 

I In a regular expression, x* means zero or more x's. 

I In a regular expression, [xyz] means x or y or z. 

I In a regular expression, [ A xyz] means any character except x or y or z. 

I In a regular expression, [a-z] means any character between a and z. 

I In a regular expression, . means any character except newline. 

I definitions of lexical classes 



%def ine Digit 
Xdefine Int 
%define Letter 
Xdeflne Alpha 
%deflne Blank 
Xdefine Quote 
Xdefine Backslash 
%def ine Char 



[0-9] 

{D I g 1 1 }+ 

[a-zA-Z] 

({Letter} j{Dlgit}|" ") 

[ \t\n] 

["3 

■w 

<r"\\] | (Backs I ash} (Quote) | {Backs I ash) (Backs I ash}) 



I definitions of white space and comments 



:{Blank}+ 

: " — " . * " \n " 



I definitions of compound symbols and keywords 



NOT 

IMPLIES 

IFF 



LE 

GE 

NE 

NLT 

NGT 

NLE 

NGE 



EQV 

NEQV 

RANGE 

APPEND 

MOD 

EXP 

BIND 

ARROW 


{Backs 1 ash) i MOD 


IF 

THEN 

ELSE 

IN 

U 


IF 

THEN 

ELSE 

IN 

U 


ALL 

SOME 

NUMBER 

SUM 

PRODUCT 

SET 

MAXIMUM 

MINIMUM 

UNION 

INTERSECTION 

SUCH 

ELSEJF 


ALL 

SOME 

NUMBER 

SUM 

PRODUCT 

SET 

MAXIMUM 

MINIMUM 

UNION 

INTERSECTION 
SUCH{Blank}*THAT 
ELSE{B lank}* IF 


AS 

CHOOSE 

CONCEPT 

DEFINITION ' 

DELAY 

DO 

END 

EXCEPTION 

EXPORT 

FI 

FOREACH 

FROM 

FUNCTION 

GENERATE 

HIDE 

IMPORT 

INHERIT 

INITIALLY 

INSTANCE 

INVARIANT 

ITERATOR 


AS 

CHOOSE 

CONCEPT 

DEFINITION 

DELAY 

DO 

END 

EXCEPTION 

EXPORT 

FI 

FOREACH 

FROM 

FUNCTION 

GENERATE 

HIDE 

IMPORT 

INHERIT 

INITIALLY 

INSTANCE 

INVARIANT 

ITERATOR 
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MACHINE : MACHINE 

MESSAGE MESSAGE 

MODEL :MODEL 

OD :OD 

OF :OF 

OPERATOR : OPERATOR 

OTHERWISE -.OTHERWISE 

PERIOD :PER IOD 

RENAME : RE NAME 

REPLY : REPLY 

SEND : SEND 

STATE :STATE 

TEMPORAL : TEMPORAL 

TIME : T I ME 

TO :TO 

TRANSACTION : TRANSACT ION 

TRANSITION TRANSITION 

TYPE TYPE 

VALUE : VALUE 

VIRTUAL : V I RTUAL 

WHEN :WHEN 

WHERE : WHERE 

SECONDS .-SECONDS 

MINUTES -.MINUTES 

HOURS -.HOURS 

DAYS : DAYS 

WEEKS .-WEEKS 

NANOSEC :NANOSEC 

MICROSEC :M ICROSEC 

MILL ISEC : M I LL ISEC 

INTEGER LITERAL :{lnt} 

REAL LITERAL : { Int}" . "( Int} 

CHAR~L ITERAL : 

STR INGL ITERAL : {Quote}{Char}‘{Quote} 

NAME :{Letter}(Alpha}* 

I operator precedences 
I Xleft means 2+3+4 Is (2+3)+4. 

Xleft IF, DO, EXCEPTION, NAME, SEMI; 

Xleft COMMA; 

Xleft SUCH; 

Xleft IFF; 

Xleft IMPLIES; 

Xleft OR; 

Xleft AND; 

Xleft NOT; 

Xleft '<*, '>', ' = ', LE, GE, NE, NLT, NGT, NLE , NGE, EQV, NEQV; 



90 



Xnonassoc IN, RANGE; 

Xleft U, APPEND; 

Xleft PLUS, MINUS; 

XI eft '/', MUL, DIV, MOD; 

Xleft UMINUS; 

Xleft EXP; 

Xleft DOT, WHERE; 

Xleft STAR; 

XX 

lattrlbute declarations 



XX 

I productions of the grammar 

start 

: spec 

{ } 



spec 

: spec module 

{ } 

’ { } 



I A production with nothing after the "!" means the empty string 
I is a legal replacement for the left hand side. 

module 

: function 
{ ) • 
j machine 
{ ) 

I type 

{ ) 

I definition 

{ ) 

| instance I of a generic module 

{ ) 



function 

: optionally virtual FUNCTION interface messages concepts END 

{ ) 

I Virtual modules are for Inheritance only, never used directly, 
mach Ine 
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: optional I y_v i r tua I MACHINE interface state messages transactions temporals concepts 
END 

{ } 



type 

: optionally virtual TYPE Interface model messages transactions temporals concepts END 
{ } 



definition 

: DEFINITION interface concepts END 
{ } 



Instance 

: optional I y_v I rtua I INSTANCE parametrized name ' = ' parametr lzed_name hide renames END 
{ ) 

I For making Instances or partial instantiations of generic modules, 

I and for making Interface adjustments to reusable components 
I by hiding or changing some names. 

Interface 

: NAME formal parameters Inherits Imports export 
{ ) 



I This part describes the static aspects of a module's interface. 

I The dynamic aspects of the Interface are described In the messages. 

I A module Is generic iff It has parameters. 

I The parameters can be constrained by a WHERE clause. 

I A module can Inherit the behavior of other modules. 

I A module can Import concepts from other modules. 

I A module can export concepts for use by other modules. 

Inherits 

: Inherits INHERIT parametr lzed_name hide renames 
{ ) 

! 

{ } 



I ancestors are generalizations or simplified views of a module 
I an actor Inherits all of the behavior of Its ancestors 



hide 

: HIDE name 1 1st 
{ ) 

{ ) 
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! Useful for providing limited views of an actor. 

! Different user classes may see different views of a system. 
! Messages and concepts can be hidden. 

renames 

: renames RENAME NAME AS NAME 
{ ) 

{ } 



I Renaming Is useful for preventing name conflicts when Inheriting 
I from multiple sources, and for adapting modules for new uses. 

I The parameters, model and state components, messages, exceptions, 
I and concepts of an actor can be renamed. 

Imports 

: Imports IMPORT name list FROM parametrized name 
{ ) 

' { ) 



export 

: EXPORT namejist 
C ) 

' { ) 



messages 

: messages message 
{ ) 

' { ) 



message 

: MESSAGE message_header operator response 
{ ) 



response 

: response_body 
{ } 

| response_cases 
{ ) 
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response cases 

: WHEN expressionj ist response body response_cases 
{ ) 

j OTHERWISE response_body 
{ ) 



response_body 

: choose reply sends transition 
{ ) 



choose 

: CHOOSE '(' field list restriction ')' 
{ } 

' ( ) 



reply 



REPLY message_header where 
{ ) 

GENERATE message header where 
{ ) 



I used in Iterators 



sends 

: sends send 
{ ) 

’ { ) 



send 



SEND message_header TO parametrized name where foreach 
{ ) 



transition 

: TRANSITION express I on_ I Ist I for describing state changes 
{ } 

’ { } 



message_header 

: opt Iona l_except Ion opt Iona l_name forma l_arguments 
( ) 
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: WHERE expresslonj ist 
{ } 

i Xprec SEMI ! must have a lower precedence than WHERE 
{ } 



optional ly_v i r tua I 
: VIRTUAL 
( ) 

' ( ) 



optional exception 
: EXCEPTION 
{ ) 

! Xprec SEMI 
{ ) 



operator 

: operator OPERATOR operatorj ist 
{ ) 



{ ) 



foreach 

: FOREACH '(' fleldjlst restriction ')' 

{ } 

' { } . 

! FOREACH is used to describe a set of messages to be sent, 
concepts 

: concepts concept 
{ ) 

’ ( } 



concept 

: CONCEPT NAME forma l_parameters type_spec where 
I constants 
{ } 

i CONCEPT NAME forma l_parameters forma l_arguments where VALUE forma l_arguments where 
I functions 
{ } 
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model ! data types have conceptual models for values 

: MODEL formal arguments invariant 
{ ) 

! MODEL forma l_arguments invariant initially 
I Initially clause specifies automatic variable initialization 
{ } 



state I machines have conceptual models for states 

: STATE formal arguments invariant initially 
{ ) 



Invariant I Invariants are true In all states 

: INVARIANT expression 1 1st 
( ) 



Initially I Initial conditions are true only at the beginning 

: INITIALLY expression I ist 
{ } 



transactions 

: transactions transaction 
( ) 

' ( ) 



transaction 

: TRANSACTION parametrized name '=' action expression where 
{ ) 

I Transactions are atomic. 

I The where clause can specify timing constraints, 
act ion_express Ion 

: action expression V action list Xprec SEMI I sequence 
{ ) 

! action I ist 
C ) 



action I Ist 

: action list action list %prec STAR I parallel 
C ) 

I IF alternatives FI I choice 
{ ) 

j DO alternatives OD j repetition 
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{ } 

parametrized name ! a normal message 
{ } 

EXCEPTION parametrized name I an exception message 
{ ) 



alternatives 

: alternatives OR guard action expression 
{ ) 

j guard action expression 
{ } 



guard 

: WHEN expression ARROW 
{ } 

' { ) 



temporals 

: temporals temporal 
{ } 

' { } 



tempora I 

: TEMPORAL NAME where response 
{ } 



I Temporal events are trigged at absolute times, 

I In terms of the local clock of the actor. 

I The "where" describes the triggering conditions 
I In terms of “TIME" and “PERIOD". 

forma l_parameters I parameter values are determined at specification time 

: *{' field list *}’ where 
{ } 

' ( ) 



forma l_arguments I arguments are evaluated at run-time 

: '(' field list ')' 

{ } 

’ { } 
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f ieldj ist 

: f leld l 1st field 
{ ) 

| field 
{ } 



field 

: name_ 1 1 st type_spec 
{ } 

| NAME type_spec 
{ } 

I '?' 

{ ) 



type_spec 

: parametrized name I name of a data type 

{ ) 

! TYPE actual parameters 
{ } 

j FUNCTION actual parameters 
{ ) 

! MACHINE actual_parameters 
{ ) 

| ITERATOR actual parameters 
{ ) 

! '?' 

{ } 



narnej ist 

T name_l ist NAME 
{ } 
i NAME 
{ } 



opt ional_name 

: NAME formal parameters 
{ } 

' { } 



parametr lzed_name 

: NAME actual parameters 
{ } 



actual_parameters ! parameter values are determined at specification time 
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! must have a lower precedence than 



: '{' arg list '}' 

{ ) 

! Spree SEMI 

{ } 



actual_arguments 

: '(' arg list ')' 
{ ) 

! Spree SEMI 
{ } 



i arguments are evaluated at run-time 
I must have a lower precedence than '(' 



arg_l 1st 

: arg list ' , ' arg 
{ )“ 

! arg 

{ } 



Spree COMMA 



arg 

: expression 

{ } 

! pair 

{ ) 



expresslonj 1st 

: expression list expression Spree COMMA 
{ ) 

! expression 
{ } 



expression 

: quantifier '(' f I e I d_ I i st restriction BIND expression ')' 
{ } 

! parametrized name actual arguments 

{ } 

! parametrized name parametrized name actual arguments 
{ } 

! NOT expression Spree NOT 

{ ) 

! expression AND expression Spree AND 
{ ) 

| expression OR expression Spree OR 
{ ) 

! expression IMPLIES expression Spree IMPLIES 
{ ) 

! expression IFF expression Spree IFF 
{ ) 
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expression 
r \ 


'<' expression 


%prec LE 


i ) 

expression 

r i 


'»' expression 


%prec LE 


i J 

expression 
{ } 


'=' expression 


%prec LE 


expression 
{ ) 


LE expression 


%prec LE 


expression 
{ } 


GE expression 


Spree LE 


expression 

r \ 


NE expression 


Spree LE 


V ) 

expression 

r i 


NLT expression 


Spree LE 


\ ) 

expression 

r \ 


NGT expression 


Spree LE 


1 J 

expression 

r \ 


NLE expression 


Spree LE 


V J 

expression 

r \ 


NGE expression 


Spree LE 


l J 

expression 

r I 


EQV expression 


Spree LE 


V J 

expression 


NEQV expression 


Spree LE 


V J 

expression 


Spree UMINUS 


expression 
r \ 


'+' expression 


Spree PLUS 


l / 

expression 
r "i 


'-' expression 


Spree MiNUS 


V J 

expression 

/ i 


'*' expression 


Spree MUL 


V J 

expression 

r i 


'/' expression 


Spree DiV 


1 i 

expression 

r \ 


MOD expression 


Spree MOD 


1 j 

expression 
{ ) 


EXP expression 


Spree EXP 


expression U expression 


Spree U 


V J 

expression 
r \ 


APPEND expression 


Spree APPEND 


V J 

expression 
{ ) 


iN expression 


Spree iN 


'*' expression 


Spree STAR 


i *x is the value of x before 


a transition 


1 x is the 


vaiue after the transition 



{ } 

! 'S' expression Spree DOT 

I $x represents a collection of items rather than just one 
I si = {x, $s2) means si = union({x}, s2) 
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1 si = [x, $s2] means si = append([x], s2) 

{ ) 

j expression RANGE expression %prec RANGE 
! x in [a .. b] iff x in {a .. b} iff a <= x <= b 
! [a .. b] is sorted in increasing order 
{ ) 

! expression NAME %prec DOT 

{ ) 

| expression '[' expression ']' %prec DOT 

{ } 

! '(' expression ')' 

{ ) 

! '(' expression units ')' 1 timing expression 

{ ) 

1 TIME I The current local time, used in temporal events 

{ ) 

I DELAY ! The time between the triggering event and the response 
{ ) 

| PERIOD I The time between successive events of this type 
{ ) 

| literal 
{ ) 

| literal parametrized name I literal with explicit type 

{ } 

| '?' I An undefined value to be specified later 

{ ) 

I An undefined and Illegal value 

{ } 

! IF expression THEN expression middle cases ELSE expression FI 
{ ) 



mlddle_cases- 

: middle cases ELSE IF expression THEN expression 
{ } 

' { ) 



quantifier 
: ALL 
{ ) 

! SOME 

{ } 

| NUMBER 
{ ) 
j SUM 
{ ) 

! PRODUCT 
{ ) 

! SET 
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{ } 

! MAXIMUM 
{ } 

| MINIMUM 
{ ) 

1 UNION 
{ ) 

| INTERSECTION 
{ ) 



restr let Ion 

: SUCH expression 
{ ) 

{ ) 



I Iteral 

: INTEGER LITERAL 
{ ) 

: REAL LITERAL 
{ ) " 

j CHAR _L ITERAL 
{ ) 

j STRING LITERAL 
{ ) 

! NAME I enumeration type literal 

{ ) 

I '[' expressions ']' I sequence literal 
{ ) 

I expressions I set literal 

{ ) 

j expression expressions '}' I map literal 

{ ) 

j '[' pair list ']' I tuple literal 

{ ) 

! '{' pair I one of I Iteral 

{ ) 



I relation literals are sets of tuples 

expressions 

: expression 1 1st 
{ } 

' { } 



pal r_l 1st 
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pair 



pa I r_ I ist ' , ' pair 

{ ) 

NAME pair 
{ ) 
pair 
{ } 



NAME BIND expression 

{ ) 



units 



NANOSEC 

{ ) 

MICROSEC 

{ } 

M ILL I SEC 

{ } 

SECONDS 

{ ) 

MINUTES 

( ) 

HOURS 

{ } 

DAYS 

{ } 

WEEKS 

{ } 



operatorj 1st 

: operator list operator_symbol 

{ } 

! operator symbol 

{ ) 



operator symbol 
: NOT 
{ } 

! AND 
{ } 
s OR 
{ } 

! IMPLIES 

{ ) 

! IFF 

{ ) 
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{ } 

C ) 

{ } 

LE 
( ) 

GE 
{ ) 

NE 
{ } 

NLT 
{ ) 

NGT 
{ } 

NLE 
{ } 

NGE 
{ } 

EQV 
{ } 
NEQV 
{ } 

' + ' 

{ } 

£ } 

{ } 

'/' 

{ ) 

MOD 
{ } 

EXP 
{ ) 

U 

{ } 

APPEND 
{ ) 

IN 
{ ) 
RANGE 
{ ) 

{ ) 

{ } 
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APPENDIX B 



I version stamp SHeader: spec.k.v 1.5 88/02/28 13:27:58 berzins Exp $ 

I In the grammar, comments go from a "I" to the end of the line. 

I Terminal symbols are entirely upper case or enclosed in single quotes ('). 

I Nonterminal symbols are entirely lower case. 

I Lexical character classes start with a captlal letter and are enclosed in {}. 
I In a regular expression, x+ means one or more x's. 

I In a regular expression, x* means zero or more x's. 

I In a regular expression, [xyz] means x or y or z. 

! In a regular expression, [ A xyz] means any character except x or y or z. 

I In a regular expression, [a-z] means any character between a and z. 

I In a regular expression, . means any character except newline. 

I definitions of lexical classes 



Xdef ine Digit 
Xdefine Int 
Xdeflne Letter 
Xdef ine Alpha 
Xdef ine Blank 
Xdeflne Quote 
Xdeflne Backslash 
Xdefine Char 



[0-9] 

{D i g i t}+ 

[a-zA-Z] 

({Letter } ! {D ig it) ! " ") 

[ \t\n] 

[“] 

*\V’ 

([ A "\\] | {Backs I ash) {Quote} | {Backs I ash}{Backs lash)) 



! definitions of white space and comments 
:{Blank)+ 

COMMENT \*"\n" 



I definitions of compound symbols and keywords 



AND 

OR 

NOT 

IMPLIES 

IFF 



LE 

GE 

NE 

NLT 

NGT 

NLE 

NGE 
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EQV : 

NEQV 

RANGE 

APPEND 

MOD 

EXP 

BIND : 

ARROW : 


{Backs lash} | MOD 


IF 

THEN 

ELSE 

IN 

U 


IF 

THEN 

ELSE 

IN 

U 


ALL 

SOME 

NUMBER 

SUM 

PRODUCT 

SET 

MAXIMUM 

MINIMUM 

UNION 

INTERSECTION 

SUCH 

ELSEJF 


ALL 

SOME 

NUMBER 

SUM 

PRODUCT 

SET 

MAXIMUM 

MINIMUM 

UNION 

INTERSECTION 
SUCH{Blank}*THAT 
ELSE {B 1 ank}* IF 


AS 

CHOOSE 

CONCEPT 

DEFINITION 

DELAY 

DO 

END 

EXCEPTION 

EXPORT 

FI 

FOREACH 

FROM 

FUNCTION 

GENERATE 

HIDE 

IMPORT 

INHERIT 

INITIALLY 

INSTANCE 

INVARIANT 

ITERATOR 


AS 

CHOOSE 

CONCEPT 

DEFINITION 

DELAY 

DO 

END 

EXCEPTION 

EXPORT 

FI 

FOREACH 

FROM 

FUNCTION 

GENERATE 

HIDE 

IMPORT 

INHERIT 

INITIALLY 

INSTANCE 

INVARIANT 

ITERATOR 
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MACHINE : MACHINE 

MESSAGE : MESSAGE 

MODEL : MODEL 

OD : OD 

OF : OF 

OPERATOR OPERATOR 

OTHERWISE OTHERWISE 

PERIOD : PER IOD 

RENAME : RENAME 

REPLY -.REPLY 

SEND .-SEND 

STATE : ST ATE 

TEMPORAL TEMPORAL 

TIME : T I ME 

TO : TO 

TRANSACTION : TRANSACT ION 

TRANSITION : TRANSITION 

TYPE : TYPE 

VALUE :VALUE 

VIRTUAL : V IRTUAL 

WHEN : WHEN 

WHERE : WHERE 

SECONDS SECONDS 

MINUTES -.MINUTES 

HOURS .-HOURS 

DAYS :DAYS 

WEEKS : WEEKS 

NANOSEC :NANOSEC 

MICROSEC :M ICROSEC 

MILL ISEC : M I LL I SEC 

INTEGER LITERAL :{lnt} 

REAL LITERAL : { Int}" . "{ Int} 

CHAR'LITERAL 

STR I NG_L ITERAL -. {Quote}{Char}*{Quote} 

NAME -.{LetterMAlpha}* 

I operator precedences 
I X I eft means 2+3+4 Is (2+3)+4. 

X lef t IF, DO, EXCEPTION, NAME, SEMI; 

Xleft COMMA; 

X left SUCH; 

Xleft IFF; 

Xleft IMPLIES; 

Xleft OR; 

Xleft AND; 

Xleft NOT; 

Xleft ’<', '>', '=', LE, GE, NE, NLT, NGT, NLE , NGE, EQV, NEQV ; 
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Xnonassoc IN, RANGE; 

Xleft U, APPEND; 

Xleft PLUS, MINUS; 

Xleft MUL, DIV, MOD; 

Xleft UMINUS; 

Xleft EXP; 

Xleft DOT, WHERE; 

Xleft STAR; 

Xleft COMMENT; 

XX 

lattrubute dec latat Ions for nonterminal symbols 
start { 

str value: string; 

}; 



spec { 

Indent: string; 
str_value: string; 



module { 

Indent: string; 
str_value: string; 



function { 

Indent: string; 
str_value: string; 



machine { 

Indent: string; 
str_value: string; 



type { 

Indent: string; 
str_value: string; 



definition { 



indent: string; 
str_value: string; 



Instance { 

Indent: string; 
str_value: string; 
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interface { 

indent: string; 
str_value: string-, 
bcursor: int; 
padding: string-, 



Inherits { 

Indent: string; 
str_value: string; 
bcursor: Int; 
padding: string; 

}; 

hide { 

indent: string; 
str_value: string; 
bcursor: Int; 
padding: string; 

}; 

renames { 

Indent: string; 
str_value: string; 
bcursor: Int; 
padding: string-, 

}; 

Imports { 

indent: string; 
str_value: string; 
bcursor: Int; 
padding; string-, 

}; 

export { 

indent: string; 
str_value: string; 
bcursor: Int; 
padding: string-, 

}; 

messages { 

Indent: string-, 
str_value: string; 
bcursor: Int; 
padding: string; 

}; 



message { 
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indent: string; 
str_vaiue: string; 
bcursor: int; 
padding: string; 



response { 

indent: string; 
str_vaiue: string; 
bcursor: int; 
padding: string; 



responsecases { 

indent: string; 
str_vaiue: string; 
bcursor: Int; 
padding: string; 



response_body { 

indent: string; 
str_vaiue: string; 
bcursor: int; 
padding: string; 

}; 

choose { 

indent: string; 
str value.- string; 
bcursor: int; 
padding: string; 



reply { 

indent: string; 
str_vaiue: string; 
bcursor: int; 
padding: string; 



sends { 

indent: string; 
str_vaiue: string; 
bcursor: int; 
padding: string; 



send { 

indent: string; 
str_vaiue: string; 
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bcursor: i nt 
padding: string; 



transition { 

indent: string; 
str_value: string; 
bcursor: I nt ; 
padding: string; 

}; 

message_header { 

Indent: string; 
str_value: string; 
bcursor: I nt ; 
ecursor-. Int; 
padding-, string; 

}; 

where { 

Indent: string; 
str value: string; 
bcursor: int; 
ecursor: int; 
padding: string; 



optional I y_v I r tua I { 

str_value: string-, 
bcursor: int; 
ecursor: Int; 

}; 

optional exception { 

Indent: string; 
str_value: string; 
bcursor: int; 
ecursor: Int; 
padding: string; 

}; 

operator { 

Indent: string; 
str_value: string; 
bcursor: Int; 
ecursor: Int; 
padding: string; 

); 

foreach { 

Indent: string; 
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st r_va I ue : string; 
bcursor: int; 
padding: string; 

}; 

concepts { 

indent: string; 
str_value: string; 
bcursor: int; 
padding: string; 

}; 

concept { 

Indent: string; 
str_value: string; 
bcursor: int; 
padding: string; 

}; 

model { 

indent: string; 
str_value: string; 
bcursor: int; 
padding: string; 

}; 

state { 

indent: string; 
str_vaiue: string; 
bcursor: int; 
padding: string; 

}; 

invariant { 

indent: string; 
str_vaiue: string; 
bcursor: int; 
padding: string; 

}; 

initial iy { 

indent: string; 
str_vaiue: string; 
bcursor: int; 
padding: string; 

}; 

transactions { 

indent: string; 
str_value: string; 
bcursor: int; 
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padding: string; 

}; 



transaction { 

indent: string; 
str_value: string; 
bcursor: int ; 
padding: string; 



act lon_expresslon { 

str_value: string; 
bcursor: Int; 
ecursor: Int; 
padding: string; 
length: Int; 

}; 



actlonj 1st { 

strvalue: string; 
bcursor: Int; 
ecursor: Int; 
padding: string; 
length: int; 

}; 



alternatives { 

str_value: string; 
bcursor: Int; 
ecursor: int; 
padding: string; 
length: int; 



guard { 

str_value: string; 
bcursor: Int; 
ecursor: int; 
padding: string; 
length: Int; 



temporals { 

Indent: string; 
str_value: string; 
bcursor: Int; 
padding: string; 



temporal { 

Indent: string; 
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str_vaiue: string; 
bcursor: int; 
padding: string; 



forma i_parameters { 

indent: string; 
str_vaiue: string; 
bcursor: int; 
ecursor: int; 
padding: string; 



forma i_arguments { 

str_vaiue: string; 
bcursor: int; 
ecursor: int; 
padding: string; 

}; 

fieidjist { 

str_value.- string; 
bcursor: int; 
ecursor: int; 
padding: string; 
length: int; 

}; 

field ( 

str_vaiue: string; 
bcursor: int; 
ecursor: int; 
padding: string; 
length: int; 

}; 

type_spec { 

str_value: string; 
bcursor: Int; 
ecursor: int; 
padding: string; 
length: int; 

}; 

narnej 1st { 

str_vaiue: string; 
bcursor: int; 
ecursor: int; 
padding: string; 
length: Int; 

}; 
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opt i ona I name { 

indent: string; 
str_vaiue: string; 
bcursor: Int; 
ecursor: int; 
padding: string; 
iength: Int; 



parametr ized_name { 

str_value: string; 
bcursor: int; 
ecursor: int; 
padding: string; 
length: Int; 



actuai_parameters { 

str_value: string; 
bcursor: int; 
ecursor: Int; 
padding: string; 
iength: int; 



actual_argutnents { 

str_vaiue: string; 
bcursor: int; 
ecursor: int; 
padding: string; 
length: int; 

}; 

arg_l ist { 

str_value-. string; 
bcursor: Int; 
ecursor: Int; 
padding: string; 
iength: Int; 

}; 

arg { 

str_value: string; 
bcursor: Int; 
ecursor: Int; 
padding: string; 
iength: Int; 

}; 



express ionj ist { 



115 



str_vaiue: string 
bcursor: int; 
ecursor: int; 
padding: string; 
iength: int; 

}; 



expression { 

str_value: string; 
bcursor: int; 
ecursor: Int; 
padding: string; 
length: Int; 



middle_cases { 

str_vaiue: string; 
bcursor: int; 
padding: string; 
iength: int; 



quantifier { 

str_value: string; 
bcursor: int; 
ecursor: int; 
padding: string; 
iength: int; 



restriction { 

str_value: string; 
bcursor: int; 
ecursor: int; 
padding: string; 
iength: Int; 

}; 



literal { 

str_vaiue: string; 
bcursor: int; 
ecursor: int; 
padding: string; 
iength: int; 



expressions { 

str_vaiue: string; 
bcursor: int; 
ecursor: int; 
padding: string; 



pa ir_l ist { 



length: int; 

}; 



str_value: string; 
bcursor: int; 
ecursor: Int; 
padding: string; 
length: Int; 

}; 



pair { 

str_value: string; 
bcursor: int; 
ecursor: int; 
padding: string; 
length: Int; 



}; 



units { 

str_value.- string; 
bcursor: int; 
ecursor: Int; 
padding: string; 
length: int; 



operator _l Ist { 

strvalue: string; 
bcursor: Int; 
ecursor: int; 
padding: string; 
length: Int; 



operator_symboi { 

str_value: string; 
bcursor: Int; 
ecursor: Int; 
padding: string; 
length: int; 



comment { 

str_value: string; 
bcursor: Int; 
length: Int; 



I attribute declarations for terminal symbols 
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I NTEGER_L I TERM { 



%text: string; 

}; 

REAL_L ITERAL { 

Xtext: string; 

}; 

CHAR_L ITERAL { 

Xtext: string; 

}; 

STR ING L ITERAL { 

Xtext: string; 

}; 

NAME { 

Xtext: string; 

}; 

COMMENT { 

Xtext: string; 

}; 



XX 

I productions of the grammar 
start 

: comment spec 
{ 

Xoutput ( [comment .st r_va I ue , spec .str_va I ue] ) ; 
spec. Indent = 
comment. bcursor = 0; 



spec 

; spec module 
{ 

module. Indent = spec[1 ]. Indent; 
spec[2]. Indent = spec[1]. Indent; 

spec[1].str_value = [spec[2].str_value, module. str_value]; 



spec.str value = 

} 



I A production with nothing after the "|" means the empty string 
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! is a legal replacement for the left hand side. 



noduie 

: function 



{ 

function. Indent = module. indent; 
module. str value = function. str value; 

} 

! machine 
{ 

machine. Indent = module. indent; 
module. str value = machine. str_value; 

} 

! type 
{ 

type. indent = module. Indent; 
module. str value = type. str value; 

} 

i definition 
{ 

def in it ion. Indent = module. indent; 
module. str_vaiue = definition. st r_va I ue ; 

} 

| Instance I of a generic module 

{ 



Instance, indent = module. Indent; 
moduie.str_va lue = Instance. str_value; 



function 

: optional iy virtual FUNCTION interface messages concepts END comment 
{ 

comment. bcursor = 0; 

optional I y_v i rtua I .bcursor = len(funct Ion. Indent); 

Interface. Indent = [funct Ion. Indent, spaces(3)]; 
messages. indent = [funct Ion. indent, spaces(3)]; 
concepts. indent = [funct Ion. Indent, spaces(3)]; 

Interface .bcursor = optional I y_v I rtua I .ecursor + 9; 

Interface. padding = [spaces(opt Iona 1 1 y_v I rtua I .ecursor), spaces(9)]; 

messages. bcursor = len(messages. indent); 

messages. padding = messages. Indent; 

concepts. bcursor = len(concepts. Indent); 

concepts. padding = concepts. Indent; 

funct ion. str_va lue = [optional i y_v I rtua I .str_value, "FUNCTION", 
Interface. str value, messages. str_va lue, concepts. str_va lue, "\n", 
function. Indent, “END", comment.str_value, "\n", "\n"]; 



I Virtual modules are for Inheritance only, never used directly. 
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machine 

: optional ly_v I rtua I MACHINE Interface state messages transactions temporals concepts 
END comment 
{ 

comment. bcursor = 0; 

optional I y_v I rtua I .bcursor = len(machlne. Indent); 

Interface. Indent = [machine. Indent, spaces(3)]; 
state. Indent = [machine. Indent, spaces(3)]; 
messages. Indent = [machine. Indent, spaces(3)]; 
transact Ions. Indent = [machine. Indent, spaces(3)]; 
temporals. Indent = [machine. Indent, spaces(3)]; 
concepts. Indent = [machine. Indent, spaces(3)]; 

Interface. bcursor = optional I y_v I rtua I .ecursor + 8; 

Interface. padding « [spaces(opt lonal I y_v I rtua I .ecursor), spaces(8)]; 

state. bcursor = len(state. Indent); 

state. padding = state. Indent; 

messages. bcursor = len(messages. Indent); 

messages. padding = messages. Indent; 

transact Ions. bcursor = len(transact ions. indent); 

transactions. padding = transact Ions. Indent; 

tempora Is. bcursor = len(temporals. Indent); 

temporals. padding = temporals. Indent; 

concepts. bcursor = l en(concepts. Indent); 

concepts. padding = concepts. indent; 

machine. str_value = [optional I y_v I rtua I .str_value, "MACHINE ", 

Interface. str_value, state. str_value, messages. str_va I ue, 
transactlons.str_value, temporals. str_value, concepts.str_value, 'An", 
machine. Indent, “END", comment. str_value, "\n", "\n"]; 



: optional I y_v I rtua I TYPE Interface model messages transactions temporals concepts 
END comment 
{ 

comment .bcursor = 0; 

opt ional I y_v I rtua I .bcursor = len(type. Indent); 
interface. Indent = [type. Indent, spaces(3)]; 
model. indent = [type. Indent, spaces(3)]; 
messages. Indent = [type. Indent, spaces(3)]; 
transactions. Indent = [type. Indent, spaces(3)]; 
temporals. Indent = [type. Indent, spaces(3)]; 
concepts. Indent = [type. Indent, spaces(3)]; 

Interface. bcursor = optional I y_v I rtua I .ecursor + 5; 

Interface. padding = [spaces(opt lonal I y_v I rtua I .ecursor), spaces(5)]; 

model .bcursor = len(model . Indent); 

model .padding = model . Indent; 

messages. bcursor = len(messages. Indent); 

messages. padding = messages. Indent; 

transact Ions. bcursor = len(transact Ions. Indent) ; 

transact Ions. padding = transactions. indent; 
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temporals. bcursor = len(temporals. Indent); 
temporals. padding = temporals. Indent; 
concepts. bcursor = len(concepts. indent); 
concepts. padding = concepts. indent; 

type.str_value - [optional iyvirtuai .str_vaiue, "TYPE ", interface. str value, 
model .str_vaiue, messages. str_va lue, transact Ions. str_va iue, 
temporals. str_value, concepts7str_vaiue, 'An", type. indent, "END", 
comment. str_vaiue, "\n", "\n”]; 



definition 

: DEFINITION Interface concepts END comment 

{ 

comment. bcursor = 0; 

Interface. Indent = [def inlt Ion. indent, spaces(3)]; 
concepts. Indent = [def inition. indent, spaces(3)]; 

Interface. bcursor = ien(def Inlt ion. Indent) + 11; 
interface. padding = [def In it ion. indent , spaces (11)]; 
concepts. bcursor = I en(concepts. Indent); 
concepts. padding = concepts. Indent; 

def Inition. str_value = ["\n\ def inition. Indent, “DEFINITION ", 

Interface. str value, concepts. str_va iue, "\n" , "END", comment. str value, "\n", 
”\n“]; 

} 



Instance 

: optional iy_v I rtua I INSTANCE parametr lzed_name *-* parametr ized_name comment hide 
renames END comment 
{ 

opt lonal I y_v I rtua I .bcursor = len( instance. indent); 
hide. Indent = [ Instance, indent, spaces(3)]; 
renames. Indent = [ Instance. Indent, spaces(3)]; 
comment[l]. bcursor = parametrized name[2] .ecursor; 
comment [2]. bcursor = 0; 

parametr ized_name[l ] . bcursor = optional I y_v I rtua I .ecursor + 
ien( Instance. Indent) + 9; 

parametr ized_name[l]. padding = [spaces(optionai I y_v I rtua I .ecursor), spaces(9)]; 
parametrized name[2]. bcursor « parametr ized_name[T] .ecursor + 3 <= 80 
-> parametrized_name[1]. ecursor + 3 
# Ien(parametr7zed_name[1]. padding) + 2; 
parametr ized_name[2]. padding = parametr lzed_name[l] .padd ing; 
hide. bcursor = ien(hide. indent); 
hide. padding = hide. Indent; 
renames. bcursor = len(renames. Indent); 
renames. padding = renames. Indent; 

instance. str_value = parametr ized_name[1]. ecursor + 3 <= 80 
-> [“\n“, Instance. indent, optional ly_v I rtua I ,str_va iue, “INSTANCE ", 

parametrized name[l] ,str_va lue, " = ", parametrized_name[2].str_vaiue, 
comment[l].str value, hide.str_value, renames. str_va iue, "\n". 
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Instance. Indent, "END", comment[2].str_value, “Vi", "\n"] 

« ["\n". Instance. indent, optional I y_v l rtua I .$tr_value, "INSTANCE ", 

parametrized_name[1].str value, “\n" , parametrized_name[1]. padding, "= , 

parametrized name[2].str value, comment[1] .str_va lue, hlde.str_value, 
renames. str value, "\n", Instance. Indent, "END", comment[2] .str value, "\n“, 
"\n“]; 



I For making Instances or partial instantiations of generic modules, 

I and for making interface adjustments to reusable components 
I by hiding or changing some names. 

Interface 

: NAME formal parameters comment inherits imports export comment 
{ 

formalparameters. Indent = Interface. indent; 
inher its. Indent = Interface. Indent; 

Imports. Indent = Interface. Indent; 
export. Indent = Interface. indent; 
comment[l] .bcursor = forma l_parameters.ecursor > 0 
-> forma i_parameters.ecursor 
# 0; 

comment[2] .bcursor = 0; 

forma l_parameters. bcursor = Interface. bcursor + len(NAME.Xtext); 
forma l_parameters. padding = [ Interface. padd Ing, spaces( len(NAME.Xtext))]; 

Inher its. bcursor = ien( inherits. indent); 

Inher Its. padding = Inherits. Indent; 

Imports. bcursor = ien( Imports, indent); 

Imports. padding = Imports. Indent; 
export. bcursor = len(export . Indent); 
export. padd Ing = export. Indent; 

Interface. str_value = [NAME .%text, formal_parameters.str_value, 
comment[1].str_value, Inherits. str_value. Imports. str_value, export. str va lue, 
comment[2].str_value]; 



I This part describes the static aspects of a module's Interface. 

I The dynamic aspects of the interface are described in the messages. 

I A module is generic iff it has parameters. 

I The parameters can be constrained by a WHERE clause. 

I A module can Inherit the behavior of other modules. 

I A module can Import concepts from other modules. 

I A module can export concepts for use by other modules. 

Inherits 

: Inherits INHERIT parametrized name comment hide renames comment 

{ 

comment[1]. bcursor = parametrized_name.ecursor; 
comment[2]. bcursor = 0; 

Inher lts[2]. Indent = Inher I ts[ 1 ] . Indent; 
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hide. Indent = [ Inher its[1] . Indent, spaces(3)]; 
renames . Indent = [ Inher its[1] . Indent, spaces(3)]; 
parametrlzed_name.bcursor = len( Inher Its. Indent) + 8; 
parametrized_name. padding = [ Inher Its. Indent, spaces(8)]; 
hide.bcursor = len(hide. indent); 
hide. padding = hide. indent; 
renames. bcursor = len(renames. Indent); 
renames. padding = renames. Indent; 

lnherlts[1].str_value = [ Inher lts[2] .str_value, "Xn", Inher lts[1]. Indent, 
"INHERIT ", parametrlzed_name.str_value, comment [1].str_va I ue, hlde.str_value, 
renames. str value, comment[2].str_value]; 

) 



lnherlts.str_value = 

} 



I ancestors are generalizations or simplified views of a module 
I an actor Inherits all of the behavior of Its ancestors 

hide 

: HIDE name 1 1st comment 
{ 

namej 1st. bcursor - hide.bcursor + 5; 
namej ist. padding = [hide. padding, spaces(5)]; 
comment. bcursor = name I Ist.ecursor; 

hide.str_value = ["\n", hide. Indent, "HIDE ", namej ist.str_value, 
comment. str value]; 

} 

' { 

hide. str value = 

} 



I Useful for providing limited views of an actor. 

I Different user classes may see different views of a system. 
I Messages and concepts can be hidden. 



: renames RENAME NAME AS NAME comment 
{ 

renames[2]. Indent = renames[1]. Indent; 
renaraes[2]. bcursor = renames[1]. bcursor; 
renames[2]. padding = renames[1]. padding; 

comment .bcursor = ( I en(renames[1]. Indent) + 7 + I en( NAME [ 1 ] . %text ) <= 80) 

&& ( len(renames[1]. Indent) + 7 + len(NAME[1].Uext) + 4 + 

I en( NAME [2]. next) > 80) 

-> len(renames[1]. padding) + 6 + len(NAME[2].«ext) 

# len(renames[1]. indent) + 11 + len(NAME[1].2text) + len(NAME[2] .next) ; 
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renames[1].str value = (len(renames[1]. Indent) + 7 + I en (NAME [1] .%text) <= 80) 
&& ( I en ( renames [1], Indent) + 7 + len(NAME[1] .Xtext) + 4 + 
len(NAME[2] .Xtext) > 80) 

-> [renames[2].str_value, M \n", renames[1] . Indent, "RENAME ", NAME[1].J!text, 
"\n", renames[1] .padding, spaces(3), "AS ", NAME [ 2 ] .Xtext, 
comment. str_value] 

# [renames[2] .str_value, "\n", renames[1] . Indent, "RENAME ", NAMEC 1 ] . %text , 
“ AS ", NAME[2] .Xtext, comment. str value]; 

} 

{ 

renames. str value « 

} 



! Renaming Is useful for preventing name conflicts when Inheriting 
! from multiple sources, and for adapting modules for new uses. 

I The parameters, model and state components, messages, exceptions, 
! and concepts of an actor can be renamed. 



Imports 

: Imports IMPORT name list comment FROM parametrized name comment 

{ 

lmports[2]. Indent * lmports[1]. Indent; 

comment[2] .bcursor = parametrlzed_name.ecursor; 

comment[1].bcursor = name I Ist.ecursor; 

lmports[2]. bcursor = I mportsC 1 ] .bcursor; 

lmports[2], padding = lmports[1] .padding; 

name I Ist. bcursor = I en( I mportsC 1 ] . padding) + 7; 

namej 1st. padding = [ lmports[1] .padding, spaces(7)]; 

parametrlzed_name. bcursor = Imports. bcursor + 8; 

parametrlzed_name. padding = [lmports[1]. padding, spaces(8)]; 

lmports[1].str_value = [ lmports[2].str_value, ”\n", lmports[1] . Indent, 

"IMPORT ", namej 1st .str_va lue, comment[1].str_value, “\n", lmports[1] . Indent, 
spaces(3), “FROM ", parametr lzed_name .str value, comment[2].str_value]; 



Imports. str value = 

} 



export 

: EXPORT name list comment 

{ 

namej ist. bcursor = export. bcursor + 7; 

comment. bcursor = namej Ist.ecursor; 

namej Ist. padding * [export .padding, spaces(7)]; 

export. str_va lue = ["\n", export. Indent, "EXPORT", namej lst.str_value, 
comment .str_va lue]; 

} 
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{ 

export. str value = 

} 



■essages 

: messages message 

t 

messages[2] . Indent » messages[1]. Indent; 
message. Indent = messages[1]. Indent; 
messages[2].bcursor = messages[1] .bcursor; 
messages[2]. padding = messages[1]. padding; 
message. bcursor = messages[1]. bcursor; 
message. padding = messages[1]. padding; 

messages[1].str_value = [messages[2] .str value, message.str_value]; 



{ 

messages. str value = 

} 



message 

: MESSAGE message header operator comment response 
{ 

message_header . Indent = [message. Indent, spaces(3)]; 
operator . Indent = [message. Indent, spaces(3)]; 
response. Indent = [message. Indent, spaces(3)]; 
comment .bcursor = operator .ecursor; 
message_header. bcursor = message. bcursor + 8; 
message_header. padding = [message. padding, spaces(8)]; 
operator. bcursor = message_header .ecursor > 0 
-> message_header. ecursor 
* message_header. bcursor; 
operator. padding = spaces(operator. bcursor); 
response. bcursor = len(response. indent); 
response. padding = response. Indent; 

message. str_value = ['An", "\n“, message. Indent, "MESSAGE ", 
message_header .str_value, operator. str_value, comment .str_va I ue, 
response. str value]; 



response 

: response body 
{ 

response_body. Indent = response. Indent; 
response_body. bcursor = response. bcursor; 
response_body. padding = response. padding; 
response. str_value - response_body.str_value; 



125 



) 



| response_cases 
{ 

response_cases. Indent = response. Indent; 
responsecases. bcursor = response. bcursor; 
response_cases. padding = response. padding; 
response. str value = responsecases.str value; 



response_cases 

: WHEN expression list comment response body response_cases comment 
{ 

response_body. Indent = [response_cases[1] . Indent, spaces(3)]; 
response_cases[2] . Indent = response_cases[1]. Indent; 
comment[l]. bcursor = expresslonj Ist.ecursor; 
comment[2] .bcursor = 0; 

expresslonj 1st. bcursor = response_cases[1] .bcursor + 5; 
expression 1 1st. padding = [response_cases[1] .padding, spaces(5)]; 
response_body. bcursor = response cases[1]. bcursor; 
response_body. padding = response_cases[1]. padding; 
response_cases[2] .bcursor = response_cases[1] .bcursor; 
response_cases[2] .padding = response_cases[1] . padding; 
response_cases[1].str_value = ["\n“, response_cases[1] . Indent, "WHEN ", 
expresslonj Ist.str jalue, comment [l].str_va I ue, response_body.str_value, 
response cases[2].str value, comment[2] .str value]; 

} 

! OTHERWISE response body 
{ 

response J)ody. Indent = [response_cases. Indent, spaces(3)]; 
response Jjody. bcursor = response_cases. bcursor + 10; 
response J)ody. padding - [responsecases. padding, spaces(IO)]; 
response_cases.str_value = ["\n", response_cases. Indent, "OTHERWISE ", 
response body. str value]; 

} 



response_body 

: choose reply sends transition comment 

{ 

comment. bcursor = 0; 
choose. Indent = response Jody . Indent; 
reply. Indent = response_body. Indent; 
sends. Indent = response J>ody. Indent; 
transit Ion. Indent = response Jjody. Indent; 
choose. bcursor = len(choose. Indent); 
choose. padding = choose. Indent; 
reply. bcursor = I en(rep I y . Indent ) ; 
reply. padding « reply. Indent; 
sends. bcursor = len(sends. Indent); 
sends. padding = sends. Indent; 
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transition. bcursor = ien(transition. indent); 
transition. padding = transition. indent; 

response_body.str_value = [choose. str_value, reply. str_value, sends. str_va lue, 
trans i t Ion. str_va iue, comment. str_va lue]; 



choose 

: CHOOSE '(' field list restriction ')' comment 

{ 

f I e I d_ list. bcursor = choose. bcursor + 7 < 80 
-> choose. bcursor + 7 

# choose. bcursor + 3; 

comment. bcursor = restriction. ecursor + 1; 
fleidj 1st. padding = choose. bcursor + 7 < 80 
-> [choose. padding, spaces(7)] 

# [choose. padding, spaces(3)]; 

restriction. bcursor = f i e i d_l 1st. ecursor + restriction. length + 1 <= 80 
-> f ieidj 1st. ecursor 

# ien(f le ld_l 1st . padding); 
restriction. padding = choose. bcursor + 7 < 80 

-> [choose. padd ing, spaces(7)] 

# [choose. padding, spaces(3)]; 

choose. str_va lue = (choose. bcursor + 7 < 80) && (restriction. length == 0) 

-> ["\n", choose. Indent, "CHOOSEC, f i e ld_ 1 1st .str_va iue , restr ictlon.str_value, 
")“, comment. str_va iue] 

# (choose. bcursor + 7 >= 80) && (restr ictlon. length == 0) 

-> ["\n", choose. indent, "CHOOSE", "Xn", spaces(choose. bcursor), spaces(3), "(“, 
f Ieidj lst.str_vaiue, restriction.str_vaiue, “)", comment. str_va iue] 

# (choose. bcursor + 7 < 80) && (field_i 1st. ecursor + 
restr ictlon. length + 1 <= 80) 

-> ["\n“, choose, indent, “CHOOSEC, f ieidj lst.str_value," ", 
restrictlon.str_vaiue, ")", comment. str_va iue] 

# (choose. bcursor + 7 >= 80) && (f le ld_l 1st. ecursor + 
restriction. length + 1 <= 80) 

-> ["\n", choose. indent, "CHOOSE ",“\n", spaces(choose. bcursor), spaces(3), "(", 
field I ist.str_value, “ ", restrlction.str_value, ")", comment. str_va lue] 

# (choose. bcursor + 7 < 80) && (f i e I d_ list. ecursor + 
restriction. length + 1 > 80) 

-> ["\n", choose. Indent, "CHOOSEC, f Ieidj lst.str_value,"\n", 

f Ieidj 1st. padding, restrictlon.str_value, “)", comment. str_va iue] 

» ["\n", "choose. Indent, "CHOOSE", "\n", spaces(choose. bcursor), spaces(3), 

"(", f Ieidj ist.str_vaiue,"\n", fleid_l 1st. padding, restriction. str_value, 
")", comment. str_va lue]; 



choose. str_va lue = ""; 

} 
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reply 

: REPLY message header comment where 
( 

comment. bcursor = message_header.ecursor > 0 
-> message_header .ecursor 
# 0 ; 

message_header. indent = reply. Indent; 
where. Indent = [reply. Indent, spaces(3)]; 
messageheader. bcursor = reply. bcursor + 6; 
message_header. padding = [reply. padding, spaces(6)]; 
where. bcursor = len(where. Indent); 
where. padding = where. Indent; 

reply.str_value = ["\n", reply. Indent, "REPLY ", message_header.str_value, 
comment. str value, where. str value]; 

} 

i GENERATE message header comment where I used In Iterators 

{ 

comment. bcursor = message_header. ecursor > 0 
-> message header .ecursor 
» 0 ; 

messageheader. Indent = reply. Indent; 
where. Indent = [reply. Indent, spaces(3)]; 
message_header. bcursor = reply. bcursor + 9; 
message_header. padding = [reply. padding, spaces(9)]; 
where. bcursor = len(where. Indent); 
where. padding = where. Indent; 

reply.str_value = ["\n“, reply. Indent, "GENERATE ", messageheader.strvalue, 
comment. str value, where. str value]; 

} 

' ( 

reply.str_value = ""; 

} 



sends 

: sends send 
{ 

sends[2] . Indent = sends[1]. Indent; 
send. Indent = sends[1] . Indent; 
sends[2]. bcursor = sends[1]. bcursor; 
sends[2]. padding = sends[1]. padding; 
send. bcursor = sends[1]. bcursor; 
send. padding = sends[1]. padding; 

sends[1].str value = [sends[2].str value, send. str value]; 

} 

' ( 

sends. str value = ""; 

} 
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send 



: SEND message header TO parametrized name comment where foreach 
{ 

comment. bcursor = parametr ized_name. ecursor; 
message_header . Indent = [send. Indent, spaces(3)]; 
where. Indent = [send. indent, spaces(3)]; 
foreach. Indent = [send. Indent, spaces(3)]; 
message_header .bcursor • send. bcursor + 5; 
message_header. padding = [send. padding, spaces(5)]; 
parametr I zed_name. bcursor = send. bcursor + 3; 
parametr lzed_name. padding * [send. padding, spaces(6)]; 
where. bcursor = ien(where. indent); 
where. padding = where. indent; 
foreach. bcursor = ien(foreach. indent); 
foreach. padding = foreach. indent; 

send.str_va iue = ["\n“, send. Indent, "SEND ", message_header.str_vaiue, "\n", 
send. indent, spaces(3), "TO ", parametr ized_name.str_vaiue, comment. str_va iue, 
where. str value, foreach. str value]; 

} 



transit Ion 

: TRANSITION expression list comment I for describing state changes 
{ 

expressionj 1st. bcursor = transit ion. bcursor + 11; 
comment. bcursor = expressionj Ist.ecursor; 
expressionj ist. padding « [transition. padding, spaces(ll)]; 
transition.str_value = ["\n", transition. indent, "TRANSITION ", 
expression list. str value, comment. str_va Iue]; 

) 

' ( 

trarisltlon.str_vaiue = ""; 

) 



■essagejieader 

: optional exception optlonal_name formal arguments 

{ 

opt Iona I _name. indent - messagejieader . indent; 
opt Iona I _except Ion. indent = message_header. padding; 
optlonai_exception. bcursor = message_header. bcursor; 
optlonai_exception. padding = message_header .padding; 
opt Iona i_name. bcursor = optionai_exception.ecursor; 
optional name. padding = spaces(opt Iona l_except ion. ecursor); 
forma ^arguments. bcursor = opt ionaijiame. ecursor < 0 
-> opt Iona I _name. bcursor 

* opt Iona I _name. length == 0 
-> optional jiame. ecursor 

# ien(opt Iona i _name. indent); 
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forma I _arguments. padding = spaces(formal_arguments.bcursor); 
message_header.ecursor = forma l_arguments.ecursor; 
message_header.str_value = optlonal_name.ecursor < 0 
-> [optional_exceptlon.str value, optional_name.str_value, optional name, indent, 
forma l_arguments .str_va lue] 

# opt Iona I _name. length == 0 

-> [optlonal_exceptlon.str_value, optlonal_name.str_value, 
forma l_arguments.str_va lue] 

# [optlonal_exceptlon.str_value, optlonal_name.str_value, "\n", 

opt lonal_name. lndent,formal_arguments.str_value]; 



where 

: WHERE expression list comment 
{ 

comment. bcursor = expresslonj Ist.ecursor; 
express ion_l 1st. bcursor = len(where. Indent) + 6; 
expresslonj 1st. padding = [where. Indent, spaces(6)]; 
where. ecursor = comment. length > 0 
-> -1 

# expresslonj Ist.ecursor; 

where. str_va lue = [ " \n ” , where. Indent, "WHERE ", expresslonj lst.str_value, 
comment. str_value]; 

} 

| Spree SEMI I must have a lower precedence than WHERE 

{ 

where. ecursor = where. bcursor; 
where. str_va lue = ; 



optional ly virtual 
: VIRTUAL 

{ 

optional I y_v I rtua I .ecursor = optionally virtual .bcursor + 8; 
optional I y_v I rtua I .str_value = ["\n“, "VIRTUAL "]; 

} 

' { 

optional I y_v I rtua I .ecursor = optional I y_v I rtua I .bcursor + 0; 
optional I y_v I rtua I .str_value - 

} 



optlonal_exceptlon 
: EXCEPTION 
{ 

optlonal_exceptlon.ecursor = optlonal_exceptlon. bcursor + 10; 
optional except Ion. str value = "EXCEPTION 

} 
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Xprec SEMI 



{ 

opt I ona I _except I on .ecursor = optlonal_exception.bcursor; 
optional except ion. str_va I ue = 

} 



operator 

: operator OPERATOR operator list 
{ 

operator[2].bcursor = operator[1] .bcursor; 
operator[2]. padding = operator[1], padding; 

operatorj ist. bcursor = operator[2] .ecursor + 10 + operatorj 1st. length <= 80 
-> operator[2] .ecursor + 10 

# len(operator[1] .padd ing) + 9; 

operatorj Ist. padding = spaces(operator_l ist. bcursor); 
operatorj], ecursor = operatorj Ist. ecursor; 

operator[1].str_value = operator[2] .ecursor + 10 + operatorj ist. length <= 80 
-> [operatorj] .strja lue, " OPERATOR ", operatorj ist.str_value] 

# [operator[2].str_value, "\n“, operatorj] .padding, "OPERATOR ", 

operator I Ist.str value]; 

) 

' ( 

operator .ecursor = operator. bcursor; 
operator. str_va lue = ""; 



foreach 

: FOREACH '(* field list restriction ')' comment 
{ 

fieldj Ist. bcursor = foreach. bcursor + 8 < 80 
-> foreach. bcursor + 8 

# len(foreach. Indent) + 4; 

f I e I d_ I Ist. padding = [foreach. padding, spaces(8)]; 
restriction. bcursor = fieldj Ist. ecursor; 
restriction. padding = fieldj Ist. padding; 
comment. bcursor = restriction. ecursor + 1; 

foreach. str_value = (foreach. bcursor + 8 < 80) && (restr let Ion. length == 0) 

-> [“\n", foreach. Indent, "FOREACHJ, fieldj Ist. str_value, 
restrlctlon.str_value, “)", comment. str_va lue] 

# (foreach. bcursor + 8 >= 80) && (restriction. length == 0) 

-> [“\n", foreach. Indent, "FOREACH", “\n“, foreach. Indent, spaces(3), "(", 
f I e I d_l Ist.str jalue, restrlctlon.str_value, ")", comment. strjalue] 

# (foreach. bcursor + 8 < 80) && (restr let Ion. length > 0) 

-> [“\n“, foreach. Indent, “F0REACH(“, f I e I d_ 1 1 st . st r_va I ue , " ", 
restrlctlon.str_value, ")", comment. str_va lue] 

# [“\n", foreach. Indent, "FOREACH", "\n", foreach. Indent, spaces(3), “(", 

f I e I d_l lst.str_value, " ", restrlctlon.str_value, ")", comment. str_va lue]; 
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{ 

foreach.str_value = 

} 

! FORE ACH is used to describe a set of messages to be sent, 
concepts 

: concepts concept 

{ 

concept . Indent = concepts[1] . Indent; 
concepts[2]. Indent = concepts[1] . Indent; 
concepts[2].bcursor = concepts[1] .bcursor; 
concepts[2]. padding = concepts[1]. padding; 
concept. bcursor = concepts[1]. bcursor; 
concept. padding = concepts[1] .padding; 

concepts[1].str_value = [concepts[2].str_value, concept. str_value]; 

} 

' { 

concepts. str value = ,,n ; 

} 



concept 

: CONCEPT NAME formal_paranieters type_spec comment where 
I constants 
{ 

comment. bcursor = type_spec.ecursor ; 

forma l_parameters. Indent = [concept. Indent, spaces(3)]; 

where. Indent = [concept . Indent, spaces(3)]; 

forma l_parameters. bcursor = concept. bcursor + 8 + len(NAME.%text); 
formal_parameters. padding = [concept. padding, spaces(8), spaces( len(NAME.Xtext))]; 
type_spec. bcursor = formal parameters. ecursor < 0 
-> len(formal_parameters. padding) + 2 

# formal_parameters. ecursor + 2 <= 80 
-> forma l_parameters. ecursor + 2 

# len(formal_parameters. padding) + 2; 
type_spec. padding = formal_parameters. padding; 
where. bcursor = len(where. Indent); 

where. padding = where. Indent; 
concept. str_value = forma l_parameters. ecursor < 0 
-> ["Xn", “\n“ , concept. Indent, "CONCEPT ", NAME.Xtext, 

forma l_parameters. str value, "\n“, forma l_parameters. padding, ", 
type_spec.str_value, comment. str_va I ue, where. str_va lue] 

# formal_parameters. ecursor + 2 <= 80 

-> ["\n" , "Xn" , concept. Indent, "CONCEPT ", NAME .Xtext, 

formal_parameters.str_value, ": ", type_spec.str_value, comment. str_va lue, 
where. str_value] 

# ["Xn”, "Xn", concept. Indent, "CONCEPT ", NAME .Xtext, 

formal_parameters.str_value, “Xn”, forma l_parameters. padding, ”, 
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node i 



! 



type_spec.str_value, comment. str value, where. str value]; 

} 

CONCEPT NAME forma l_parameters forma l_arguments where VALUE formal_arguments where 
! functions 
{ 

formal_parameters. Indent = [concept . Indent, spaces(3)]; 
where[T]. Indent = [concept. Indent, spaces(3)]; 
where[2]. indent = [concept. Indent, spaces(3)]; 
forma l_parameters.bcursor = concept. bcursor + 8 + len(NAME.%text); 
forma I _parameters. padding * [concept. padding, spaces(8), spaces( I en(NAME . %text ) ) ] ; 
forma l_arguments[1]. bcursor = formal_parameters.ecursor > 0 
-> formaiparameters.ecursor 
« I en( forma I _parameters. padding); 
formal_arguments[1]. padding = forma l_parameters. padding; 
where[T]. bcursor = ien(where[1]. Indent); 
where[1]. padding = where[1] . Indent; 

forma l_arguments[2], bcursor = len(concept. padding) +3+6; 
formai_arguments[2]. padding = [concept. padding, spaces(3), spaces(6)]; 
where[2] .bcursor = len(where[2]. Indent); 
where[2], padding = where[2]. Indent; 

concept. strva I ue = [“\n", “\n“, concept. Indent, "CONCEPT ", NAME.%text, 
formai_parameters.str_value, formal_arguments[1].str_value, where[1].str_value, 
"\n“, concept. Indent, spaces(3), “VALUE ", forma l_arguments[2].str_value, 
where[2] .str_value]; 



I data types have conceptual models for values 
MODEL formal arguments Invariant 
{ 

invariant. Indent = [model . indent, spaces(3)]; 
forma i_arguments. bcursor = len(mode I . Indent) + 6; 
forma l_arguments. padding - [mode I . Indent, spaces(6)]; 
invariant. bcursor = I en( invar I ant. indent); 

Invariant. padding = Invariant. Indent; 

model .str_value = [“\n“, "\n\ mode I . Indent, "MODEL ", formal_arguments.str_value, 
Invariant. str value]; 

) 

MODEL forma l_arguments Invariant Initially 
I Initial ly clause specif les automatic variable Initialization 
{ 

Invar lant. Indent = [model . Indent, spaces(3)]; 

Initial ly. Indent * [model . Indent, spaces(3)]; 
forma I _arguments. bcursor = ien(model . Indent) + 6; 
formal_arguments. padding = [model . Indent, spaces(6)]; 

Invar lant .bcursor = len( Invariant. Indent); 

Invar I ant. padding = Invar lant. Indent; 

Initial ly. bcursor - len( Initial ly. Indent); 

Initial ly. padding = Initial ly. Indent; 
model. str value = [“\n", “\n“ , model . Indent, "MODEL ”, 
formal arguments. str value, Invariant. str_value. Initial ly.str value]; 
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} 



state ! machines have conceptual models for states 

: STATE formal arguments Invariant initially 
{ 

invariant. indent = [state. Indent, spaces(3)]; 
initial ly. indent = [state. Indent, spaces(3)]; 
forma l_arguments.bcursor = len(state. Indent) + 6; 
formal_arguments. padding = [state. indent, spaces(6)]; 

Invar iant.bcursor = len( Invariant. Indent); 
invar I ant. padding = Invariant. Indent; 

Initial ly.bcursor = len( Initial iy. Indent); 

Initial ly. padding = Initial ly. Indent; 

state.str_value = ["\n", "\n", state. Indent, "STATE ", formal_arguments.str_value, 
invar iant.str value, initial iy.str value]; 

} 



Invariant I Invariants are true In all states 
: INVARIANT expression list comment 
{ 

expressionj ist.bcursor = Invar Iant.bcursor + 10; 
comment. bcursor = express lon_l 1st. ecursor; 
expressionj 1st. padding = [Invariant. padding, spaces(IO)]; 
invariant. str_value = ["\n". Invar lant. Indent, "INVARIANT", 
express I on_ I lst.str_value, comment. str_va I ue] ; 

) 



Initially I initial conditions are true only at the beginning 
: INITIALLY expressionj 1st comment 
{ 

express lonj ist.bcursor = Init lal ly.bcursor + 10; 
comment. bcursor = expression 1 1st. ecursor; 
expressionj 1st. padding = [Initial iy. padding, spaces(IO)]; 
initial I y.str_value = ["\n“, initial I y. indent, "INITIALLY ", 
expression list.str value, comment. str value]; 

} 



transactions 

: transactions transaction 
{ 

transact lons[2]. indent - transactlons[1]. Indent; 
transaction. indent = transactlons[1]. Indent; 
transact lons[2]. bcursor = transactlons[1]. bcursor; 
transactions^], padding = transactlons[1]. padding; 
transaction. bcursor = len(transact Ion. Indent); 
transaction. padding = transact Ion. Indent; 

transactlons[1].str_vaiue = [transactlons[2].str_value, transactlon.str_value]; 
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) 



{ 

transact Ions. str value = 

} 



transaction 

: TRANSACTION parametrized name action expression comment where 
{ 

comment. bcursor = actlon_expresslon.ecursor; 
where. Indent = [transaction. Indent, spaces(3)]; 
parametr ized_name. bcursor = len(transact ion. indent) + 12; 
parametrlzed_name. padding = [transact ion. Indent, spaces(12)]; 
act ion_express ion. bcursor = parametr lzed_name.ecursor + 3 <= 80 
-> parametr ized_name.ecursor + 3 

# I en(parametr lzed_name. padding); 
action_expression. padding = parametrized name.padd ing-, 
where. bcursor = ien(where. indent); 

where. padding - where. indent; 

transaction.str_value = parametrized name.ecursor + 3 <= 80 
-> ["\n", "\n", transaction. Indent, "TRANSACTION ", 

parametr ized_name.str_value, " = ", actlon_expresslon.str_value, 
comment .str_va I ue, where .str_va lue] 

# ["\n”, "\n", transaction. Indent, "TRANSACTION ", 

parametr ized_name.str_vaiue, " "\n“, parametr lzed_name. padding, 

act I on_express I on . st r_va i ue , comment .str_va I ue , where .str va lue] ; 



I Transactions are atomic. 

i The where clause can specify timing constraints. 
actlon_expresslon 

: actlonjexpresslon comment action list %prec SEMI ! sequence 

{ 

actlon_expression[1]. length = act ionexpress ion[2] . length + 2 + comment. length 
+ action 1 1st . length; 

comment .bcursor = act ion_expression[2] .ecursor + 2; 
act ion_expresslon[2]. bcursor = action_expression[1]. bcursor; 
action_expression[2]. padding = action_expression[1], padding; 
act I on_ i 1st. bcursor = comment. length > 0 
-> ien(act I on_expression[1], padding) 

# act ion_expresslon[2]. ecursor + 2 <= 80 
-> act ion_expression[2]. ecursor + 2 

# I en(act I on_express I on[ 1 ] .padd ing); 

act I on_ 1 1st. padding = action_expression[2]. padding; 
act lon_expression[1], ecursor = act i on_ 1 1st. ecursor; 
actlon_expresslon[1].str_vaiue - comment, length > 0 
-> [actlon_expresslon[2].str_value, comment. str_va lue, 
act I on_ I lst.str_value] 

# act ion_express ion[2] . ecursor + 2 <= 80 
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-> [act lon_expresslon[2] .str_va lue, ", comment. str_va I ue, 
actionj lst.str_value] 

# [act lon_expresslon[2] .str_value, "Xn", comment .str_va lue, 
act lon_express I on[ 1 ] .padding, act lon_l 1st .str_va lue] ; 

} 

j action 1 1st 
{ 

actlon_expresslon. length = actionj 1st. length; 
act I on_l Ist.bcursor = actlon_expresslon.bcursor; 
act I on_l 1st. padding = actlon_expresslon.paddlng; 
act ion_expresslon.ecursor = act lon_l Ist.ecursor; 
act lon_expresslon.str_value » act I on_l lst.str_value; 



act I on_i 1st 

: action list action list Xprec STAR I parallel 

{ 

act I on_ 1 1 st [ 1 ] . length = act I on_ I lst[2] . length + act I on_ I lst[3] . length; 

act I on_ I lst[2].bcursor = act lonj I st [ 1 ] .bcursor; 

act I on_ I i st [2] . padding = actionj I st [ 1 ] . padding; 

act I on_ I lst[3] .bcursor = act I on_ 1 1 st [2] .ecursor; 

act I on_ 1 1 st [3] . padding = act I on_ I lst[1] .padding; 

actionj i st [ 1 ] . ecursor = act lonj ist[3] .ecursor; 

act I on_l ist[1].str_value = [action I lst[2] .str_va lue, actlonl lst[3] .str_va lue] ; 

} 

| IF alternatives FI I choice 

{ 



act lon_l ist. length = 3 + alternatives. length + 3; 

alternat Ives. bcursor = act lonj Ist.bcursor + 3 + alternatives. length <= 80 
-> act lonj Ist.bcursor + 3 

# I en(act I on_ I Ist. padding) + 3; 

alternatives. padding = act lonj Ist.bcursor + 3 + a Iternat Ives. length <= 80 
-> [actionj Ist. padding, spaces(3)] 

# act lonj Ist .padding; 

actionj ist.ecursor = alternatives. ecursor + 3 <= 80 
-> alternat Ives. ecursor + 3 

# len(alternatlves. padding) + 2; 

actionj lst.str_value = (act lonj Ist .bcursor + 3 + a Iternat Ives. length <= 80) 
&& (a Iternat Ives. ecursor + 3 <= 80) 

-> ["IF ", alternatives. str_value, " FI"] 

# (actionj Ist.bcursor + 3 + alternatives. length > 80) 

&& (a iternat Ives. ecursor + 3 <■ 80) 

-> ["\n", actionj Ist. padding, "IF ", alternatives. str_value, 

# (actionj Ist.bcursor + 3 + alternatives. length <= 80) 

&& (a Iternat Ives. ecursor + 3 > 80) 

-> ["IF ", alternatlves.str_value,"\n", alternatives. padding, 

# ["Xn", actionj Ist. padding, "IF ", alternatlves.str_value, 

alternatives. padding, "FI"]; 



1 FI"] 



"FI"] 

"Xn", 



} 

| DO alternatives OD I repetition 
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{ 

act i on_ I ist. length = 3 + alternatives. length + 3; 

alternat Ives.bcursor = act ion_l Ist.bcursor + 3 + alternatives. length <= 80 
-> act lonj Ist.bcursor + 3 

# len(action_l Ist. padding) + 3; 

alternat Ives. padding = act lonj ist.bcursor + 3 + alternat ives. length <= 80 
-> [actlonj Ist. padding, spaces(3)] 

# actionj Ist. padding; 

act lon_l Ist.ecursor = alternatlves.ecursor + 3 <= 80 
-> alternatlves.ecursor + 3 

# len(alternatlves. padding) + 2; 

actlonj lst.str_value = (act lonj Ist.bcursor + 3 + a Iternat Ives, length <= 80) 
88 (alternatlves.ecursor + 3 <= 80) 

-> ["DO ", alternat Ives. str_value, " 0D"] 

# (act lonj Ist.bcursor + 3 + alternatives. length > 80) 

88 (alternatlves.ecursor + 3 <= 80) 

-> ["\n“, actlonj 1st. padding, "DO ”, alternatlves.str jalue, " 0D“] 

# (actlonj ist.bcursor + 3 + alternatives. length < 80) 

88 (alternatlves.ecursor + 3 > 80) 

-> ["DO ", alternatlves.str_value,"\n”, alternatives. padding, "0D"] 

# ["\n", actlonj Ist. padding, "DO ", alternatlves.str jalue, "\n", 

a Iternat Ives. padding, "OD"]; 

} 

| parametrized name I a normal message 

{ 

act ionj Ist . length = parametr Izedjiame. length; 
parametrized name.bcursor = action I Ist .bcursor; 
parametr Izedjiame. padding = act I on_ I Ist .padding; 
actlonj ist.ecursor = parametr Izedjiame.ecursor; 
actlonj Ist.str value = parametrized name.str_value; 

) 

! EXCEPTION parametrized name I an exception message 
{ 

act fon_ I Ist. length = 10 + parametr Izedjiame. length; 

parametrized name.bcursor = act ion_l Ist.bcursor + 10; 

parametr Izedjiame. padding = [actlonj Ist. padding, spaces(IO)]; 

actionj ist.ecursor = parametrized name.ecursor; 

actlonj ist.str_value = ["EXCEPTION ", parametr Izedjiame. strja lue]; 



alternatives 

: alternatives OR guard action expression 
{ 

a I ternat I ves[ 1 ] . length ■= alternatives^]. length + 3 + guard, length 
+ action expression. length; 
alternatives^]. bcursor = alternat lves[1] .bcursor; 
alternatives^], padding = alternatlves[1]. padding; 
guard. bcursor = alternatlves[2].ecursor + 3 <= 80 
-> alternatlves[2].ecursor + 3 
« I en(a I ternat I ves[ 1 ] . padding) + 2; 
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guard. padding = a I ternat I ves[ 1 ] - padding; 
actlon_expresslon.bcursor = guard. ecursor; 
actlon_expresslon.padding = alternatlvestl]. padding; 
alternatlvestl]. ecursor * action_expresslon. ecursor; 
alternatlves[1].str_value = alternatlves[2]. ecursor + 3 <= 80 
-> [a Iternat lves[2] .str value, “ | ", guard. str_value, 
act I on_express I on . st r_va I ue ] 

# [alternatives^]. str_value, "\n“, alternatlvestl]. padding, ”j ", 
guard. str value, act lon_expresslon.str value]; 

} 

| guard action expression 
{ 

alternatives. length = guard. length + actlon_expresslon. length; 

guard. bcursor = a Iternat Ives. bcursor; 

guard. padding = alternatives. padding; 

act lon_expresslon. bcursor = guard. ecursor; 

actlon_expresslon. padding = alternatives. padding; 

alternat Ives. ecursor = action expression. ecursor; 

alternatives. str value = [guard. str value, action expression. str_value]; 

} 



guard 

: WHEN expression ARROW 

{ 

guard. length = 5 + expression. length + 3; 
expression. padding = spaces(expresslon. bcursor); 
expression. bcursor = guard. bcursor + 5; 
guard. str_value = expression. ecursor + 3 <= 80 
-> ["WHEN ", expression. str_va lue, ” ->", ”\n", guard. padding] 

# ["WHEN ", expression. str_value, "\n”, express I on. padd Ing, "\n", 

guard. padding]; 

guard. ecursor = express ion. ecursor + 3 <= 80 
-> len(guard. padding) 

# len(guard. padding) + 2; 



{ 

guard. length = 0; 

guard. ecursor - guard. bcursor; 

guard. st r_vaiue = ""; 



temporals 

: temporals temporal 
{ 

tempora ls[2] . Indent = temporais[1]. indent; 
tempora I . Indent = tempora I s[1]. Indent; 
tempora ls[2]. bcursor = tempora I s[ 1 ] . bcursor; 
temporals[2]. padding = tempora I s[1 ] . padding; 



temporal .bcursor = temporals[1].t>cursor; 
temporal .padding = temporals. padding; 

temporals[l].str_value = [temporals[2]. str_value, temporal .str_value]; 



tempora Is.str value = 

} 



temporal 

: TEMPORAL NAME where response 
{ 

where. Indent = [temporal . Indent, spaces(3)]; 
response. Indent = [temporal . Indent, spaces(3)]; 
where. bcursor = len(where. Indent); 
where. padding = where. Indent; 
response. bcursor = len(response. Indent); 
response. padding = response. Indent; 

temporal .str_value = [“\n“, "\n", tempora I . Indent, "TEMPORAL ", NAME.%text, 
where. str value, response. str value]; 

} 

I Temporal events are trigged at absolute times, 

I In terms of the local clock of the actor. 

I The "where” describes the triggering conditions 
I In terms of “TIME" and “PERIOD". 

forma l_parameters I parameter values are determined at specification time 

: field 1 1st *}' where 

{ 

where, indent = formal_parameters. Indent; 
f I e | d_ 1 1st. bcursor = formal_parameters. bcursor + 1 < 80 
-> formal_parameters. bcursor + 1 

# len(formal_parameters. padding) + 1; 

f ie I d_l 1st. padding = [formal_parameters. padding, spaces(l)]; 
where. bcursor = len(where. Indent); 
where. padding = where. Indent; 
formal parameters. ecursor = where. ecursor < 0 
-> where. ecursor 

# where. ecursor <= where. bcursor 
-> f I e I d_ 1 1st. ecursor + 1 

« where. ecursor; 

formal parameters. str_value = formal_parameters. bcursor + 1 < 80 
-> [“{“, f I e I d_ 1 1 st . st r_va I ue , where. str_value] 

# [“\n“, forma l_parameters. padding, "{”, f Ie7d_l lst.str_value, "}*, 

where. str value]; 

} 

’ ( 

formal_parameters. ecursor = forma l_parameters. bcursor; 
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forma l_parameters.str_va lue = “"5 

} 



forma l_arguments I arguments are evaluated at run-time 

: '(' field list ')' comment 
{ 

comment. bcursor = f leldj Ist.ecursor + 1; 
f I e I d_ 1 1st. bcursor = forma l_arguments. bcursor + 1 < 80 
-> forma l_arguments. bcursor + 1 

* len(formal_arguments. padding) + 1; 

field list. padding = [forma l_arguments. padding, spaces(l)]; 
formaT_arguments.ecursor = comment. length == 0 
-> field I Ist.ecursor + 1 

# - 1 ; 

forma l_arguments.str_va lue = forma l_arguments. bcursor + 1 < 80 
-> f leldj 1st. str_value, comment. str_va lue] 

# ["\n", forma l_arguments. padding, "(”, f ieldj lst.str_value, 
comment. str_value]; 

} 

i comment 
{ 

comment. bcursor = forma l_arguments. bcursor; 
forma l_arguments.ecursor = forma l_arguments. bcursor; 
formal arguments. str value = comment. str value; 



field list 

:~f leld list field 

C 

fleld_llst[1], length = f leldl lst[2] . length + 2 + f leld. length; 
f leldj 1st [2] . bcursor = f leldj I st [ 1 ] . bcursor; 
fleldj 1st [2] . padding = fleldj I st [ 1 ] . padding; 
field. bcursor = f leldj lst[2] .ecursor + 2 <= 80 
-> fleldj 1st [2] . ecursor + 2 

# len(f leld I lst[1] .padding); 
field. padding = fleldj lst[1]. padding; 
fleldj 1st [ 1 ] . ecursor = field. ecursor; 

fleldj lst[1].str_value = fleldj I st [2] . ecursor + 2 <= 80 
-> [fleldj lst[2].str_value, ", ", field. st r_va I ue] 

# [field 1 1 st [ 2] .str value, ”\n", field 1 1 st [ 1 ] .padding, field. str value]; 

} 

I field 

{ 

fleldj 1st. length = field. length; 
field. bcursor = fleldj ist. bcursor; 
f leld. padding = fleldj Ist. padding; 
f leldj Ist.ecursor = field. ecursor; 
f le ld_l Ist .str_va lue = field. str_va I ue ; 
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field 

: name list ' type spec 
{ 



field, length = name_ 1 1st. length + 2 + type_spec. length; 
name_l Ist.bcursor * field. bcursor; 
namej 1st. padding = field. padding; 

type_spec. bcursor = namej Ist.ecursor + 2 + type_spec. length <= 80 
-> namej Ist.ecursor + 2 
# len(f I e Id . padding) + 2; 
type_spec. padding - field. padding; 
f leld.ecursor = type spec.ecursor; 

f leld.str_value = name I Ist.ecursor + 2 + type_spec. length <= 80 
-> [namej lst.str_vaTue, ", type_spec.str_value] 

« [namej Ist.strj/alue, "\n", field. padding, ", type_spec.str_value]; 



} 

! NAME type spec 
{ 



field. length = 1 + len(NAME .Xtext) + 3 + type_spec. length; 
type_spec. bcursor = fie Id. bcursor + 3 + len(NAME.Xtext) + 1 
+ type_spec. length <= 80 
-> field. bcursor + 3 + I en(NAME . Xtext ) 

» I en(f I e I d . padding) + 3 + len(NAME.Xtext); 
type_spec. padding = field. padding; 
f ie Id.ecursor = type spec.ecursor; 

field. str_value = field. bcursor + 3 + len(NAME.%text) + 1 
+ type_spec. length <= 80 

-> [“$■', NAME .Xtext, “, type_spec.str_value] 

ft [“\n", field. padding, "$", NAME .Xtext, ” : ", type_spec.str_value]; 



{ 

field. length = 1; 

f leld.ecursor = field. bcursor + 1 <= 80 
-> field. bcursor + 1 
» I en(f I e Id . padding) + 1; 
field. str_value = f leld.bcursor+ 1 <« 80 



-> -?■ 

# ["\n", field. padding, "?"]; 



type_spec 

: parametrized name I name of a data type 

{ 

type spec. length = parametrized jiame. length; 
parametrlzedjiame. bcursor « type_spec. bcursor; 
parametr Izedjiame.padd ing = type_spec. padding; 
type_spec.ecursor = parametr lzed_name.ecursor; 
type_spec.str_value = parametrlzed_name.str_value; 
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} 

TYPE actual parameters 
{ 

type_spec. length = 4 + actualparameters. length; 
actua I _parameters. padding = type_spec. padding; 
actual_parameters.bcursor = typespec.bcursor + 4 <= 80 
-> type_spec.bcursor + 4 

# len(type_spec. padding) + 4 ; 
typespec.ecursor = actua l_parameters.ecursor; 
type_$pec.str_value = type_spec.bcursor + 4 <= 80 

-> ["TYPE", actua l_parameter$.$tr_va lue] 

# ["\n“, type_spec. padding, "TYPE", actua l_parameters.str value]; 

} 

FUNCTION actual parameters 

{ 

type_spec. length = 8 + actua l_parameters. length; 
actua ^parameters. bcursor = typespec.bcursor + 8 <» 80 
-> type_spec.bcursor + 8 

# len(type spec. padding) + 8; 

actua ^parameters. padding = typespec. padding; 
type_spec.ecursor = actual_parameters.ecursor; 
typespec.str value = type spec.bcursor + 8 <= 80 
-> ["FUNCTION", actua l_parameters.str_va lue] 

# ["\n", type spec. padding, "FUNCTION", actual parameters. str_value]; 

} 

MACHINE actual parameters 

{ 

type_spec. length = 7 + actua l_parameters. length; 
actua Iparameters.bcursor = type_spec.bcursor + 7 <= 80 
-> type_spec.bcursor + 7 

# len(type_spec. padding) + 7; 
actualparameters. padding = type_spec. padding; 

actua l_parameters.ecursor = actua l_parameters.ecursor; 
type_spec.str_value = type_spec.bcursor + 7 <= 80 
-> ["MACHINE", actua ^parameters. str_va lue] 

# ["\n", type spec. padding, "MACHINE", actual parameters. str value]; 

} 

ITERATOR actual parameters 

{ 

type_spec. length = 8 + actualparameters. length; 
actua l_parameters.bcursor = type_spec.bcursor + 8 <= 80 
-> typespec.bcursor + 8 
a len(type_spec. padding) + 8; 
actua I parameters. padding = type_spec. padding; 
actua l_parameters.ecursor - actua l_parameters.ecursor; 
type_spec.str_value = type_spec.bcursor + 8 <= 80 
-> ["ITERATOR", actualparameters. str_value] 

# ["\n", type spec. padding, "ITERATOR", actual parameters. str value]; 

} 

'?' 

{ 
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type_spec. length = 1 ; 

type_spec.ecursor = type_spec.bcursor + 1 <= 80 
-> type_spec.bcursor + 1 

# len(type_spec. padding) + 1; 
type_spec.str_value = type_spec.bcursor + 1 <= 80 

-> -?■ 

# [“\n", type_spec. padding, 



name list 

7 name list NAME 
{ 

name_l I st[ 1 ] . length = namej I st [2] . length + len(NAME. Xtext); 
namej lst[2] .bcursor = name_l lst[1] .bcursor; 
name_l I st [ 2] . padding = name_l ist[1]. padding; 

namej lst[1] .ecursor = (namel lst[2] .ecursor + len(NAME. Xtext) + 1) <= 80 
-> namej I st [2] . ecursor + Ien(NAME. Xtext) + 1 
« len(name_l lst[1]. padding) + I en(NAME .Xtext) + 1; 
name 1 1 st [ 1 ] . st r_va I ue = (name 1 1 st [2] . ecursor + len(NAME. Xtext) + 1) <= 80 
->"[name_l lst[2].str_value, NAME .Xtext, “ ”] 

# [name 1 1 st [2] . st r value, ,, \n“, name 1 1 st [ 1 ] . padding, NAME. Xtext, " "]; 

} 

J NAME 
( 

name_ 1 1st. length = len(NAME. Xtext); 

namej 1st. ecursor = (namej 1st. bcursor + ien(NAME. Xtext) + 1) <= 80 
-> namej 1st. bcursor + Ien(NAME. Xtext) + 1 

# len(name_l 1st. padding) + len(NAME. Xtext) + 1; 

namej lst.str_value = (namej 1st. bcursor + len(NAME. Xtext) + 1) <= 80 
-> [NAME .Xtext , spaces(l)] 

# ["\n", namej 1st. padding, NAME .Xtext , spaces(l)]; 



optlonal_name 

: NAME formal parameters 
{ 

optional name. length = optional name. ecursor == formal parameters, bcursor 
-> 0 
# 1 ; 

opt lonaljiame. ecursor = formal_parameters. ecursor; 
formal_parameters. Indent = optional jiame. Indent; 

formal parameters. bcursor = opt I onaTjame. bcursor + len(NAME.Xtext) < 80 
-> opt Iona I jiame. bcursor + len(NAME .Xtext) 

# len(opt Iona l_name. padding) + I en( NAME . Xtext ) ; 
formal_parameters7paddlng = [optlonal_name. padding, spaces( len(NAME. Xtext))]; 
optional name.strjalue = optlonal_name. bcursor + len(NAME. Xtext) < 80 

-> [NAME. Xtext, forma l_parameters.str_value] 

* ["\n", optional name. padding, NAME. Xtext, formal j)arameters.str_vaiue]; 



143 



opt Iona i_name. length = 0; 

opt iona I _name. ecursor = opt Iona I _name. bcursor; 

optlonai_name.str_value = 



parametr I zed_name 

: NAME actual parameters 

{ 

parametr ized_name. length = ien(NAME.Xtext) + actual_parameters. length; 
actuai_parameters.bcursor = (parametr ized_name. bcursor + len(NAME.%text)) <= 80 
-> parametr lzed_name. bcursor + len(NAME.Xtext) 

# ien(parametrlzed_name. padding) + len(NAME.Xtext); 
parametr I zed_name.ecursor = actua l_parameters.ecursor; 
actual_parameters. padding = parametr ized_name. padding; 

parametrlzed_name.str_vaiue = (parametr lzed_name.bcursor +ien(NAME.Xtext) ) <= 80 
-> [ NAME. Xt ext, actuai_parameters.str_value] 

# [“\n", parametr ized_name. padding, NAME.Xtext, actua l_parameters.str_value]; 



actua l_parameters I parameter values are determined at specification time 

: arg 1 1st ')' 

{ 

actua i_parameters. length - 2 + arg_l 1st. length; 
arg_i ist.bcursor = actua i_parameters.bcursor + 1 < 80 
-> actua i_parameters.bcursor + 1 

# len(actua i_parameters. padding) + 1; 
arg_i 1st. padding = spaces(arg_l 1st .bcursor); 
actua i_parameters.ecursor = argl 1st .ecursor + 1; 

actua i_parameters.str_vaiue = actua ^parameters . bcursor + 1 < 80 
-> arg_i lst.str_vaiue, "}”] 

# ["\n", actua l_parameters. padding, argl ist.str_vaiue, “}”]; 

} 

| Xprec SEMI I must have a lower precedence than '{' 

{ 

actuai_parameters. length = 0; 

actua I _parameters. ecursor = actua i_parameters. bcursor; 
actual parameters. str value = 

} 



actua l_arguments I arguments are evaluated at run-time 

; '(' arg list ')' 

{ 

actua I _arguments. length = 2 + arg_l 1st. length; 
arg_l Ist.bcursor = actua l_arguraents. bcursor + 1 < 80 
-> actua l_arguments. bcursor + 1 
# ien(actual_arguments. padding) + 1; 
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arg_i 1st. padding = spaces(arg_l ist.bcursor); 
actual_arguments.ecursor = argl Ist.ecursor + 1; 
actual_arguments.str_value = actual_arguments. bcursor + 1 < 80 
-> arg_l ist .str_va lue, ")"] 

* [“\n", actual arguments. padding, arg I ist.strvalue, 

} 

Xprec SEMI I must have a lower precedence than '(' 

{ 

actua I _arguments. length = 0; 

actual_arguments.ecursor = actual_arguments.bcursor; 
actual_arguments.str_vaiue = 



arg_l Ist 

: arg list arg Spree COMMA 

{ 

arg_l ist[1]. length * arg_l I st [2] . length + 2 + arg. length; 
arg_l lst[2] .bcursor = arg_i ist[1].bcursor; 
arg_l I st [2] . padding = argl I st [ 1 ] . padding; 
arg. bcursor = arg_i lst[2] .ecursor + 2 <= 80 
-> argl ist[2] .ecursor + 2 

# len(arg_l lst[1]. padding); 
arg. padding = arg_l lst[1] .padding; 
arg_l I st [ 1 ] . ecursor - arg. ecursor; 

arg_l ist[1].str_vaiue = arg_i lst[2] .ecursor + 2 <= 80 
-> [argl I st [2] . st r_va I ue . ", ", arg.strvalue] 

# [arg 1 1 st [2] .str value, "\n", arg I ist[1]. padding, arg.str value]; 

} 

! arg 

{ 

argj Ist. length = arg. length; 
arg. bcursor = arg_l Ist.bcursor; 
arg. padding = arg_l Ist .padd I ng ; 
arg_l Ist.ecursor * arg. ecursor; 
arg I Ist. str value = arg.str value; 

} 



: expression 
{ 

arg. length = expression. length; 
express Ion. bcursor = arg. bcursor; 
express I on. padding * arg. padding; 
arg. ecursor = expression. ecursor; 
arg.str value = expression. str value; 

} 

! pair 

{ 

arg. length = pair. length; 



145 



palr.bcursor = arg.bcursor; 
pair. padding = arg. padding; 
arg.ecursor = palr.ecursor; 
arg.str value = palr.str value; 

} 



expresslonj 1st 

: expression list comment expression Xprec COMMA 

{ 

expresslonj lst[1]. length = expresslonj lst[2] . length + 2 + comment, length 
+ expression. length; 
expression. bcursor = comment, length > 0 
-> len(expresslon_l I st [ 1 ] . padding) 

# expresslonj lst[2]. ecursor + 2 + expression. length <= 80 
-> express lonj lst[2] .ecursor + 2 

# len(express Ion 1 1 st [ 1 ] . padding); 
comment. bcursor = expresslon_l I st [2] . ecursor +1; 
expression. padding = expresslonj I st[1 ] . padding; 
express lon_l lst[2]. bcursor = expresslonj lst[1]. bcursor; 
expresslon_l I st [2] . padding = expresslonj lst[1]. padding; 
expression 1 1 st [ 1 ] . ecursor = expression. ecursor; 
expresslonj I st [ 1 ] . st r_va I ue = comment. length > 0 

-> [express ion_l lst[2].str_value, ", comment. str_value, 
express I on_ I lst[1] .padding, express Ion. str_va I ue] 

# express Ion _T i s t [ 2 ] .ecursor + 2 + expression, length <= 80 

-> [expresslonj lst[2].str_value, ", ", comment. str_value, express Ion. str va lue] 

# [expresslonj lst[2].str_value, "\n", comment. str_va lue, 

expression 1 1 st [ 1 ] . padding, expression. str value]; 

} 

! expression 
{ 

expresslonj 1st. length = expression. length; 
expression. bcursor = expressionj 1st. bcursor; 
expression. padding = expresslonj 1st. padding; 
express lonj 1st. ecursor = expression. ecursor; 
expressionj lst.str_value = expression. str_value; 



expression 

: quantifier '(' field list restriction BIND expression ')' 

{ 

express lon[1]. length = quantifier. length + 2 + fleldj 1st. length 
+ restriction, length + 4 + expression^], length; 
quantifier. padding = express lon[1] . padding; 
quantifier. bcursor = expresslon[1]. bcursor; 
fleldj 1st. bcursor = quantifier. ecursor + 1; 
fleldj 1st. padding = spaces(f leldj 1st. bcursor); 
restrict Ion. bcursor = fleldj 1st. ecursor + restr let Ion . length <= 80 
-> field 1 1st. ecursor 
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t f i e I d_ I ist.bcursor; 
restriction. padding = f ieldj ist. padding; 

expression^]. bcursor = restrictlon.ecursor + 4 + express i on[2] . length + 1 <= 80 
-> restrictlon.ecursor + 4 

# len(restr let ion. padding) + 3; 

expression^] .padding = restrictlon.ecursor + 4 + express lon[2]. length + 1 <= 80 
-> f I e I d_l Ist. padding 

# [restr lctlon.paddlng,spaces(3)]; 
expresslon[1].ecursor = express lon[2] .ecursor + 1; 

express lon[1].str_value = (fleldj Ist. ecursor + restr let Ion. length <= 80) 

&& (restrictlon.ecursor + 4 + 1 + express ion[2]. length <= 80) 

&& (restriction. length == 0) 

-> [quantlf ler.str_value, "(", f I e ld_ I Ist .str_va lue , restriction. str_value, 

’ :: ”, expression^]. str_value, “)”] 

# (f I e I d_ I Ist .ecursor + restriction. length <= 80) 

&& (restrictlon.ecursor + 4 + 1 + express lon[2]. length <= 80) 

&& (restriction. length > 0) 

-> [quantlf ler.str_value, ”(“, f Ieldj lst.str_value, ” ", restriction.strvalue, 
" :: ”, express lon[2].str_va lue, ”)"] 

« (fleld_l Ist. ecursor + restriction. length > 80) 

&& (restrictlon.ecursor + 4 + 1 + express lon[2] . length <= 80) 

&& (restriction. length == 0) 

-> [quantlf ler .str_va lue, "(", f Ieldj lst.str_value, "\n", f I e I d_ I Ist. padding, 
restrlctlon.str_value, ", express lon[2].str_va lue, ")"] 

# (f le I d_l Ist. ecursor + restriction. length > 80) 

&& (restrictlon.ecursor + 4 + 1 + express ion[2]. length <= 80) 

&& (restriction. length > 0) 

-> [quantlf ler. str_value, "(", f Ieldj lst.str_value, "\n”, fleldj ist. padding, 
restriction.strvalue, ” :: ", express ion[2].str_va lue, ")"] 

# (fleld_l Ist. ecursor + restriction. length > 80) 

&& (restrictlon.ecursor + 4 + 1 + express lon[2] . length > 80) 

&& (restr Ictlon. length > 0) 

-> [quantlf ler. str_value, "(", field I Ist.strvalue, "\n", f Ieldj ist. padding, 
restrlctlon.str_value, "\n“, restriction. padding,":: ", 
expression^]. str_value, ”)“] 

# (fie ld_l Ist .ecursor + restr Ictlon. length > 80) 

&& (restrictlon.ecursor + 4 + 1 + express I on[2] . length > 80) 

&& (restriction. length == 0) 

-> [quantlf ler. str_value, “(“, fleldj Ist. str_value, "Nn", 
restriction. padding,":: ", express lon[2].str_va lue, ")“] 

# restriction, length -« 0 

-> [quantlf ler. str_va lue, "(", f I e I d_l lst.str_value, restrlctlon.str_value, 

"\n", restriction. padding, ":: ", expression^]. strjalue, ")"] 
t [quantlf ler. str_value, “(“, fleldj Ist. str_value, “ ", restrlctlon.str_value, 
"\n“, restriction. padding, “:: ", expresslon[2].str_value, ")"]; 

} 

I paraaetrlzed naie actual arguments 
{ 

expression. length = parametr I zed_naae. length + actua I _arguments. length; 
parametrized jiame.bcursor = express Ion. bcursor; 
parametrlzedname. padding « expression. padding; 
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actual_arguments.bcursor = paranietrlzed_name.ecursor; 
actua i_arguments. padding = expression. padding; 
expression. ecursor = actua I _arguments. ecursor; 

expression. str value = [parametr lzed_name. str value, actual arguments. str value]; 

} 

parametrized name '§' parametrized name actual arguments 

{ 

expression. length = parametr lzed_name[1] . length + 1 + parametr lzed_name[2] . length 
+ actual_arguments. length; 
parametrized_name[1].bcursor = express ion. bcursor; 
parametrized name[1]. padding = expression. padding; 
parametr lzed_name[2] . bcursor = parametr I zed_name[1] .ecursor + 1 <= 80 
-> parametr lzed_name[1] .ecursor + 1 

# ien(parametrlzed_name[1]. padding) + 1; 
parametr ized_name[2] . padding = express I on. padding; 
actuai_arguments. bcursor = parametr lzed_name[2] .ecursor; 
actual arguments. padding = expression. padding; 
expression. ecursor = actua l_arguments. ecursor; 
expression. strvalue = parametrized name[1]. ecursor + 1 <= 80 

-> [parametr lzed_name[1] .str_va lue, "e", parametrlzed_name[2].str_value, 
actua I _arguments . st r_va I ue] 

# [parametrized_name[1].str_value,"\n", parametr lzed_name[l]. padding, 

parametrized name[2].str value, actual arguments. str value]; 

} 

HOT expression %prec NOT 

( 

express I on[1], length = 1 + express lon[2]. length; 

express I on[2] . bcursor = express I on[ 1 ] . bcursor + 1 + expression^] . length <= 80 
-> express lon[1]. bcursor + 1 

# len(expresslon[1]. padding) +1; 

express lon[2]. padding - [expresslon[1] .padding, " "]; 
express lon[1]. ecursor = express lon[2]. ecursor; 

expresslon[1] .str_value = expresslon[1] .bcursor + 1 + expression^] . length <= 80 
-> express lon[2] .strva lue] 

# ["\n", expresslon[1]. padding, expression^] .str value]; 

) 

expression AND expression Xprec AND 
{ 

expression^], length = expresslon[2] . length + 3 + expression^] . length; 
express lon[2]. bcursor = expresslon[1]. bcursor; 
expression^] .padding = expresslon[1] . padding; 

expression[3]. bcursor = expression^] .ecursor + 3 + express lon[3]. length <« 80 
-> express I on[2] . ecursor + 3 

# len(expresslon[1]. padding) + 2; 
expression[3]. padding = expresslon[1]. padding; 
expresslon[1]. ecursor - expresslon[3] .ecursor; 

expresslon[1].str_value = express I on[ 2] . ecursor + 3 + expression[3] . length <= 80 
-> [expression^]. str_value, " & ", express lon[3].str_va lue] 

# [express lon[2].str_va lue, "\n", expression^] .padding, ”& ", 

express ion[3] . str value]; 

} 



Xprec OR 



expression OR expression 
{ 

express i on[ 1 ] . length = expression^]. length + 3 + expression^]. length; 
express ion[2] .bcursor = expression[1].bcursor; 
express I on[2]. padding = expresslon[1]. padding; 

express ion[3], bcursor = express lon[2] .ecursor + 3 + express i on[3] . length <= 80 
-> express lon[2]. ecursor + 3 

# ien(expresslon[1]. padding) + 2; 
express lon[3], padding = expresslon[1], padding; 
expresslon[1]. ecursor = expression^], ecursor; 

expresslon[1].str_value = express lon[2]. ecursor + 3 + expression^], length <= 80 
-> [express lon[2].str_value, ’ | ", express lon[3].str_vaiue] 

* [expresslon[2].str_value, ”\n", expresslon[1]. padding, "j ", 

express lon[3].str_vaiue]; 

) 

expression IMPLIES expression Xprec IMPLIES 

{ 

expresslon[1]. length = express i on [ 2 ] . length + 4 + expression^], length; 
express lon[2]. bcursor * expresslon[1] .bcursor; 
expresslon[2]. padding = express lon[1]. padding; 

express lon[3]. bcursor = express I on[ 2] . ecursor + 4 + express lon[3] . length <= 80 
-> express I on[2] . ecursor + 4 

• ien(expression[1]. padding) + 3; 
expresslon[3]. padding - expresslon[1] .padding; 
expresslon[1]. ecursor = expression^]. ecursor; 

expression[1].str_value = express I on[2] . ecursor + 4 + expression^] . length <= 80 
-> [expression^]. str_value, " => ", express lon[3].str_value] 
it [expression^]. str_value, “\n", expresslon[1] .padding, "=> ", 
expression^]. str value]; 

} 

expression IFF expression Xprec IFF 
{ 

expresslon[1]. length = expresslon[2] . length + 5 + expresslon[3]. length; 
express lon[2] .bcursor = express lon[1]. bcursor; 
expression^] .padding = expresslon[1]. padding; 

express lon[3] .bcursor * express lon[2] .ecursor + 5 + expression^]. length <= 80 
-> express lon[2]. ecursor + 5 
« len(expresslon[1]. padding) + 4; 
expression^] .padding = spaces(expresslon[3]. bcursor); 
expresslon[1]. ecursor = expresslon[3] .ecursor; 

expresslon[1].str_value •= expression^]. ecursor + 5 + express I on[3] . length <= 80 
-> [expresslon[2].str_vaiue, " <=> ", expression[3].str_value] 

• [expresslon[2].str_vaiue, "\n", expresslon[1]. padding, "<=> ", 

expresslon[3].str value]; 

) 

expression '<' expression Xprec LE 
{ 

expression[1]. length = express lon[2]. length + 3 + express lon[3] . length; 
express lon[2] .bcursor = expresslon[1], bcursor; 
expresslon[2], padding = expresslon[1]. padding; 

express I on [ 3] .bcursor = expression^], ecursor + 3 + express lon[3] . length <= 80 
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-> expression^] .ecursor + 3 

# len(expression[1]. padding) + 2; 
expresslon[3]. padding = expresslon[1]. padding; 
expresslon[1]. ecursor = expresslon[3] .ecursor; 

expresslon[1].str_value = expression^], ecursor + 3 + expression^]. length <= 80 
-> [expresslon[2] .str value, " < ", expresslon[3] .str_value] 

# [express lon[2].str_value, “\n“, expresslon[1] .padding, ”< ", 

expresslon[3] .str value]; 

} 

expression *>' expression Xprec LE 
{ 

expresslon[1]. length = express I on[2] . length + 3 + expression^], length; 
expresslon[2] .bcursor = expresslon[1].bcursor; 
expresslon[2]. padding - express I on[1]. padding; 

express I on[3] . bcursor = express I on[2] . ecursor + 3 + express I on[3] . length <= 80 
-> express I on[2] . ecursor + 3 

# len(expresslon[1]. padding) + 2; 
expresslon[3] . padding = expresslon[1], padding; 
expresslon[1]. ecursor = expresslon[3] .ecursor; 

expresslon[1].str_value = expresslon[2] .ecursor + 3 + express ion[3]. length <= 80 
-> [expresslon[2].str_value, “ > ", expresslon[3].str_value] 

# [expresslon[2].str_value, "\n", express lon[1]. padding, "> ", 

express I on[3] . str value]; 

} 

expression expression Xprec LE 
{ 

expresslon[1]. length = expression^] . length + 3 + expression[3] . length; 
express I on[2] . bcursor * expresslon[1] .bcursor; 
expresslon[2]. padding = expresslon[1] . padding; 

expression^] .bcursor = expression[2] .ecursor + 3 + expression[3] . length <= 80 
-> express I on[2] . ecursor + 3 

# len(expresslon[1]. padding) + 2; 
expression^]. padding = expresslon[1]. padding; 
expresslon[1]. ecursor = expresslon[3] . ecursor; 

expresslon[1].str_value = express lon[2]. ecursor + 3 + expresslon[3]. length <- 80 
-> [expresslon[2].str_value, * = ", expression^]. str_value] 

# [expresslon[2].str_value, "\n“, express I on[ 1 ] .padding, “= ", 

expresslon[3].str value]; 

) 

expression LE expression Xprec LE 
{ 

expresslon[1], length = expression^], length + 4 + expresslon[3]. length; 
expression^] .bcursor - expresslon[1] .bcursor; 
expression^], padding = expresslon[1] .padding; 

express lon[3]. bcursor - express lon[2]. ecursor + 4 + expression^] . length <= 80 
-> expression^], ecursor + 4 

# len(expresslon[l] . padding) + 3; 
express lon[3]. padding = expresslon[1] .padding; 
express lon[ 1 ] . ecursor - express lon[3]. ecursor; 

express lon[1].str_value = express I on[2] . ecursor + 4 + expresslon[3] . length <= 80 
-> [expresslon[2].str_value, " <= “, expression[3] .str_va lue] 
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* [expresslon[2].str_value, "\n", expresslon[1]. padding, "<= ", 

expression^]. str value]; 

} 

expression GE expression Spree LE 
{ 

expression[1]. length = express I on[2] . length + 4 + express lon[3]. length; 
express lon[2] .bcursor = expresslon[1].bcursor; 
expression[2]. padding = express lon[1]. padding; 

express lon[3]. bcursor = express lon[2] .ecursor + 4 + express lon[3]. length <= 80 
-> express lon[2] . ecursor + 4 

* len(expresslon[1]. padding) + 3; 
expresslon[3]. padding « expresslon[1] .padding; 
express lon[l] .ecursor * express lon[3]. ecursor; 

expresslon[1].str_value » express lon[2]. ecursor + 4 + expresslon[3]. length <= 80 
-> [express lon[2].str_va lue, " >« ", express ion[3].str_value] 

* [expression^]. str_value, ”\n", expresslon[1] .padding, ">= ", 

expression^]. str value]; 

} 

expression HE expression %prec LE 
{ 

express ion[1]. length - express i on[2] . length + 4 + express lon[3] . length; 
express I on[2] . bcursor = expression[l]. bcursor; 
expression[2]. padding = expression[l]. padding; 

expression^]. bcursor = expresslon[2] .ecursor + 4 + express ion[3]. length <= 80 
-> express lon[2]. ecursor + 4 

* len(expression[1]. padding) + 3; 
expression^], padding = expresslon[1]. padding; 
expresslon[1]. ecursor = expression^], ecursor; 

express lon[1].str_value = express ion[2]. ecursor + 4 + express ion[3]. length <= 80 
-> [expresslon[2].str_value, “ “« ", expression^] ,str_va lue] 
it [expresslon[2].str_value, "\n", expression[1]. padding, "'= ", 
express lon[3].str value]; 

} 

expression HLT expression Xprec LE 

{ 

expresslon[1]. length = expression^] . length + 4 + express lon[3]. length; 
express lon[2]. bcursor = expresslon[1], bcursor; 
expression^]. padding = expresslon[1]. padding; 

express lon[3]. bcursor = express ion[2]. ecursor + 4 + expresslon[3]. length <= 80 
-> express ion[2]. ecursor + 4 

* len(expression[1]. padding) + 3; 
expression^], padding = expresslon[1], padding; 
expresslon[1]. ecursor = express lon[3]. ecursor; 

expresslon[1].str_vaiue = express ion[2]. ecursor + 4 + express ion[3]. length <= 80 
-> [express lon[2].str_va lue, " “< ", express ion[3].str_va lue] 
it [expression^]. str_vaiue, “\n", expression[1]. padding, "'< ", 
expresslon[3].str value]; 

) 

expression NGT expression Xprec LE 

{ 

express I on[ 1 ] . length = express lon[2]. length + 4 + expresslon[3]. length; 
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expression^] .bcursor = expression[1]. bcursor; 
expression[2]. padding = expression[1] .padding; 

expression^] .bcursor = expression^] .ecursor + 4 + expresslon[3] . length <= 80 
-> expression^] .ecursor + 4 

# ien(expression[1] .padding) + 3; 
express lon[3]. padding = express ion[1]. padding; 
express lon[1]. ecursor = expression^]. ecursor; 

express lon[1].str_value = express lon[2]. ecursor + 4 + express I on[3] . length <= 80 
-> [expresslon[2].$tr_vaiue, “ "> ", expression^] .str_va iue] 

# [expression^]. str_vaiue, "\n", expression[1], padding, “"> ", 

express I on[3].str_va iue]; 

} 

| expression NLE expression Xprec LE 

{ 

expression[1]. length = express ion[2]. length + 5 + expression^] . length; 
express lon[2] .bcursor * expresslon[1] .bcursor; 
express i on [2] .padding = express lon[1]. padding; 

express i on[3] . bcursor = express lon[2]. ecursor + 5 + express lon[3] . length <= 80 
-> expression^], ecursor + 5 

# ien(expression[1]. padding) + 4; 
express I on[3] . padding - express I on[1]. padding; 
express i on[ 1 ] . ecursor = expression^] .ecursor; 

express lon[1].str_va Iue = express ion[2]. ecursor + 5 + express ion[3] . length <= 80 
-> [expression^]. str_value, “ "<= ", express ion[3] .str_value] 

# [expression[2] .str_value, "\n", expresslon[1]. padding, “"<= ", 

express I on[3] .st r_va Iue] ; 

) 

j expression NGE expression %prec LE 
{ 

express I on[ 1 ]. length = expression^], length + 5 + expression^], length; 
expresslon[2] .bcursor - expresslon[1]. bcursor; 
expression^]. padding = expresslon[1]. padding; 

expression[3] .bcursor = expression[2] .ecursor + 5 + express ion[3]. length <= 80 
-> express lon[2] . ecursor + 5 

# len(expresslon[1]. padding) + 4; 
express lon[3]. padding = expresslon[1] .padding; 
expression[1]. ecursor = expresslon[3] .ecursor; 

express lon[1].str_va Iue = expression^] .ecursor + 5 + expression^] . length <= 80 
-> [expression^]. str_vaiue, " ">« “, expression[3].str_value] 

# [expresslon[2].str_value, "\n“, express ion[1]. padding, "">= ", 

express lon[3] .str_va Iue] ; 

} 

! expression EQV expression Xprec LE 

{ 

express I on[ 1 ] . length = expresslon[2]. length + 4 + express ion[3]. length; 
express ion[2] .bcursor = expression[1] .bcursor; 
express lon[2]. padding - express lon[1 ] .padding; 

express ion[3]. bcursor = expression^] .ecursor + 4 + expression^], length <= 80 
-> express lon[2] .ecursor + 4 

# len(expresslon[1]. padding) + 3; 
express lon[3]. padding = expresslon[1] . padding; 
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expresslon[1].ecursor = expresslon[3].ecursor; 

express ion[1].str_value = express lon[2].ecursor + 4 + express ion[3] . length <= 80 
-> [expression[2].str_vaiue, " == ”, expression^]. str_value] 

# [expression[2].str_value, "\n“, express lon[1], padding, "== ", 

expression[3].str value]; 

} 

expression NEQV expression Xprec LE 

{ 

expresslon[1]. length = expresslon[2]. length + 5 + express lon[3]. length; 
express lon[2] .bcursor = expresslon[1].bcursor; 
express lon[2] . padding = expresslon[1]. padding; 

express I on[3] . bcursor = express ion[2] .ecursor + 5 + express ion[3] . length <= 80 
-> express I on[2] . ecursor + 5 

# len(expresslon[1]. padding) + 4; 
expression^], padding = expresslon[1]. padding; 
expresslon[1], ecursor = express lon[3] .ecursor; 

express lon[1].str_value = express I on[2] . ecursor + 5 + express I on[3] . length <= 80 
-> [express ion[2].str_vaiue, " ~== ", express lon[3] .str value] 

# [expresslon[2].str_vaiue, “\n", express lon[1]. padding, ""== ", 

expresslon[3].$tr value]; 

} 

expression Xprec UMINUS 

{ 

expression[1]. length = 1 + expression^], length; 

express lon[2] .bcursor = expression[1] .bcursor + 1 + express I on[2] . length <= 80 
-> expresslon[1] .bcursor + 1 

# len(expresslon[1]. padding) + 1; 
expression^], padding = expression[1]. padding; 
expression[1] .ecursor = expression^], ecursor; 

expression[1].str_vaiue « expresslon[1]. bcursor + 1 + express lon[2]. length <= 80 
-> expression[2].str_value] 

« [“\n", express lon[1]. padding, expresslon[2].str_value]; 

} 

expression '+' expression Xprec PLUS 

C 

express lon[1]. length = express lon[2] . length + 3 + express I on[3] . length; 
express lon[2]. bcursor = express ion[1]. bcursor; 
expresslon[2]. padding = express ion[1]. padding; 

express I on[3] . bcursor = express ion[2]. ecursor + 3 + express lon[3]. length <= 80 
-> express I on[2] . ecursor + 3 

# ien(expresslon[1]. padding) + 2; 
expression^] .padding - expresslon[1]. padding; 
express I on[ 1 ] . ecursor = express lon[3]. ecursor; 

expression[1].str_vaiue = expresslon[2]. ecursor + 3 + express lon[3] . length <= 80 
-> [expresslon[2].str_value, “ + “, express lon[3].str_value] 

« [expresslon[2].str_value, "\n", express ion[1 ] .padding, "+ ", 
expression^]. str value]; 

} 

expression expression Xprec MINUS 

( 

express I on[1]. length = express I on[2] . length + 3 + express lon[3] . length; 
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expression!^]. bcursor = express lon[1] .bcursor; 
expression^]. padding = expresslon[1] .padding; 

express lon[3]. bcursor = express ion[2] .ecursor + 3 + expresslon[3] . length <= 80 
-> express lon[2]. ecursor + 3 

# len(expresslon[1] .padding) + 2; 
expression^]. padding = express lon[l] . padding; 
expresslon[1] .ecursor = express lon[3] .ecursor; 

express lon[1].str_value = express lon[2]. ecursor + 3 + express I on[3] . length <« 80 
-> [expresslon[2].str_value, " - ", expresslon[3].str_value] 

# [expresslon[2].str_value, "\n", expresslon[1]. padding, ", 

express lon[3] .str value]; 

} 

! expression expression Xprec MUL 

{ 

expresslon[1]. length = expresslon[2]. length + 3 + expresslon[3]. length; 
express lon[2] .bcursor = express lon[1] .bcursor; 
expression^]. padding = expresslon[1]. padding; 

express I on[3] . bcursor = expression^]. ecursor + 3 + express lon[3]. length <= 80 
-> express lon[2] .ecursor + 3 

# len(expresslon[1], padding) + 2; 
expresslon[3]. padding = express lon[1] . padding; 
expresslon[1], ecursor = express lon[3] .ecursor; 

express lon[1].str_value = express lon[2] .ecursor + 3 + express lon[3]. length <= 80 
-> [expresslon[2].str_value, ” • ", expresslon[3].str_value] 

# [expresslon[2].str_value, "\n", express lon[1]. padding, “* ", 

express lon[3]. str value]; 

} 

i expression '/' expression Xprec DIV 
{ 

expresslon[1]. length = expresslon[2]. length + 3 + express lon[3] . length; 
expresslon[2] .bcursor - express lon[1] . bcursor; 
expression^] .padding = expresslon[1] .padding; 

express ion[3], bcursor = expresslon[2] .ecursor + 3 + expression^] . length <= 80 
-> express I on[2] . ecursor + 3 

# len(expresslon[1]. padding) + 2; 
expresslon[3] .padding = expresslon[1]. padding; 
expresslon[1]. ecursor = expression^], ecursor; 

expresslon[1] .str value = express lon[2] .ecursor + 3 + expression^] . length <= 80 
-> [expression[2].str_value, " / ", expression^]. str_value] 

# [expresslon[2].str_value, "\n", express lon[1]. padding, "/ ", 

expresslon[3].str_value]; 

} 

! expression MOD expression Xprec MOD 

{ 

express I on [ 1 ] . length = express I on[2] . length + 5 + express lon[3] . length; 
express lon[2]. bcursor = express I on[ 1 ] . bcursor; 
expresslon[2]. padding = expresslon[1] .padding; 

express I on[3] . bcursor = express lon[2]. ecursor + 5 + express lon[3] . length <= 80 
-> express I on[2] . ecursor + 5 
« len(expresslon[1]. padding) + 4; 
expression^]. padding = expression!*!]. padding; 
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expresslon[1], ecursor = expression^]. ecursor; 

expression[1].str_value = express lon[2].ecursor + 5 + expression^], length <= 80 
-> [expresslon[2].str_value, " MOD ", expression^]. str_va lue] 

# [expression[2].str_value, “\n", express ion[1]. padding, "MOD ", 

expression^]. str value]; 

} 

expression EXP expression Xprec EXP 
{ 

expresslon[1]. length = express lon[2] . length + 4 + expresslon[3]. length; 
expression^]. bcursor = expression[1].bcursor; 
expression^], padding - expresslon[1] .padding; 

expresslon[3].bcursor = expression^] .ecursor + 4 + expresslon[3] . length <= 80 
-> expression^]. ecursor + 4 

# len(expresslon[1]. padding) + 3; 
express I on[3] . padding = expresslon[1] .padding; 
expression[1]. ecursor = express lon[3]. ecursor; 

expresslon[1].str_value = expresslon[2]. ecursor + 4 + expresslon[3], length <= 80 
-> [expresslon[2].str value, " ** ", expresslon[3].str_value] 

# [expresslon[2].str_value, “\n", expresslon[1] .padding, "** ", 

express lon[3] .str_va lue] ; 

} 

expression U expression Xprec U 

{ 

expresslon[1]. length = express lon[2]. length + 3 + expresslon[3]. length; 
expression^]. bcursor = expresslon[1].bcursor; 
expresslon[2]. padding = expresslon[1]. padding; 

expresslon[3].bcursor = expresslon[2] .ecursor + 3 + expresslon[3]. length <= 80 
-> expression^], ecursor + 3 

# len(expresslon[1]. padding) + 2; 
expression^] .padding - expression[1]. padding; 
expresslon[1] .ecursor = express lon[3]. ecursor; 

expresslon[1].str_value = expresslon[2]. ecursor + 3 + expression^] . length <= 80 
->. [expresslon[2].str_value, “ U ", expression^]. str_value] 

# [expresslon[2] .str_value, “\n", expresslon[1]. padding, "U ", 

express I on[3]. st r_va lue]; 

} 

expression APPEND expression Xprec APPEND 

( 

expresslon[1]. length = expression^]. length + 4 + expresslon[3]. length; 
express lon[2].bcursor - expresslon[1].bcursor; 
expresslon[2]. padding « expresslon[1], padding; 

express lon[3].bcursor = expresslon[2]. ecursor + 4 + express lon[3] . length <= 80 
-> express I on[2] . ecursor + 4 

# len(expresslon[1]. padding) + 3; 
expression^] .padding - expression^] .padding; 
expresslon[1]. ecursor = expresslon[3]. ecursor; 

expresslon[1].str_value - expression^] .ecursor + 4 + express lon[3] . length <= 80 
-> [expresslon[2].str_value, "I! ", expresslon[3].str_value] 

« [expresslon[2].str_value, "\n“, expresslon[1] .padding, “j| ", 
express I on[3] .str_va lue] ; 

} 
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Xprec IN 



expression IN expression 
{ 

express ion[1] . length = express lon[2]. length + 4 + express ion[3] . length; 
express lon[2] .bcursor = expresslon[1]. bcursor; 
expression^] .padding = express I on[ 1 ] .padding; 

express lon[3]. bcursor = express lon[2] .ecursor + 4 + express lon[3]. length <= 80 
-> express lon[2]. ecursor + 4 

# len(expresslon[1]. padding) + 3; 
express lon[3] .padding = express lon[1] . padding; 
expresslon[1]. ecursor = express lon[3]. ecursor; 

expresslon[1].str_value = expression^] .ecursor + 4 + express lon[3]. length <= 80 
-> [express lon[2].str_value, " IN ", express lon[3] .str_value] 

# [expresslon[2] .str_value, ”\n“, expresslon[1]. padding, "IN ", 

expression^] .str value); 

} 

expression Xprec STAR 

I *x Is the value of x before a transition 
I x Is the value after the transition 
{ 

express I on[1]. length = 1 + express lon[2] . length; 

express I on[2] . bcursor = express I on[1]. bcursor + 1 + express lon[2] . length <= 80 
-> express lon[1]. bcursor + 1 

# len(expresslon[1]. padding) + 1; 
express I on[2] . padding = expresslon[1] . padding; 
express lon[1]. ecursor = expression^] .ecursor; 

expresslon[1].str_value = expresslon[1] .bcursor + 1 + express lon[2]. length <= 80 
-> express lon[2].str_value] 

# ["VT, expresslon[1] .padding, expresslon[2] .str value]; 

} 

expression Xprec DOT 

I $x represents a collection of Items rather than Just one 
I si = [x, $s2) means si = unlon({x), s2) 

I si = [x, $s2] means si = append([x], s2) 

{ 

express lon[1]. length = 1 + express lon[2]. length; 

expression^]. bcursor = expresslon[1]. bcursor + 1 + express I on[2]. length <= 80 
-> expresslon[1]. bcursor + 1 

# len(expresslon[1]. padding) + 1; 
express I on[2] . padding = expresslon[1]. padding; 
expresslon[1]. ecursor = expression^], ecursor; 

express lon[1].str_value = express I on[ 1 ] .bcursor + 1 + express lon[2]. length <= 80 
-> [“S", express lon[2].str_value] 

# ["\n", expresslon[1]. padding, "$", express lon[2] .str value]; 

} 

expression RANGE expression Xprec RANGE 

I x In [a .. b] Iff x In {a .. b} Iff a <= x <= b 
I [a .. b] Is sorted In Increasing order 
{ 

expresslon[1]. length - expression^], length + 4 + express lon[3]. length; 
express lon[2]. bcursor = express lon[1]. bcursor; 
expression^] .padding = express lon[1]. padding; 
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express lon[3] .bcursor = express ion[2].ecursor + 4 + express i on[ 3] . length <= 80 
-> express lon[2] .ecursor + 4 

# len(expression[1]. padding) + 3; 
expression^]. padding = expresslon[1]. padding; 
expresslon[1]. ecursor = expresslon[3]. ecursor; 

expresslon[l].str_vaiue = express lon[2]. ecursor + 4 + express I on[3] . length <= 80 
-> [expression^]. str_value, “ .. ", express lon[3].str_value] 

# [express ion[2].str_va lue, "\n", express ion[1]. padding, ", 

express ion[3].str_vaiue]; 

} 

expression NAME Xprec DOT 

{ 

expresslon[1], length = express I on[2] . length + 1 + ienCNAME.Xtext); 
expresslon[2]. bcursor = expresslon[1] .bcursor; 
expression[2]. padding = expression[1]. padding; 

expresslon[1]. ecursor = express I on[ 2] .ecursor + 1 + ien(NAME.Xtext) <= 80 
-> express lon[2] .ecursor + 1 + len(NAME.Xtext) 

# ien(expression[1] . padding) + len(NAME.Xtext); 
expresslon[1].str_value = express I on[2] . ecursor + 1 + len(NAME.3!text) <= 80 

-> [expresslon[2].str_value, NAME.Xtext] 

# [expression[2].str value, “\n", expresslon[1]. padding, NAME.Xtext]; 

} 

expression '[' expression ']' Xprec DOT 

{ 

express I on[ 1 ] . length = expresslon[2] . length + 2 + express ion[3]. length; 
express I on[2] . bcursor - expressionp]. bcursor; 
expression[2]. padding = expression[1]. padding; 

express lon[3], bcursor = express I on[2] . ecursor + 2 + expresslon[3] . length <= 80 
-> expresslon[2]. ecursor + 1 

# len(expresslon[1]. padding) + 1; 
expression^], padding = expresslon[1]. padding; 
expression[1], ecursor = expression^], ecursor + 1; 

expresslon[1].str value = express ion[2] .ecursor + 2 + expresslon[3]. length <= 80 
-> [expression[2].str_value, "[", expression^]. str_value, "]”] 

# [expresslon[2].str_vaiue, “\n", expresslon[1] . padding, "[“, 

expression[3].str value, "]"]; 

} 

'(' expression ')' 

{ 

express ion[1 ]. length = 2 + expresslon[2] . length; 

expression^]. bcursor « expresslon[1]. bcursor + 2 + express I on[ 2] . length <= 80 
-> expression[1]. bcursor + 1 

# len(expresslon[1], padding) + 1; 
expression^]. padding = expresslon[1]. padding; 
express I on[ 1 ] . ecursor = express lon[2]. ecursor + 1; 

expression[1].str_value = expression[1]. bcursor + 2 + expression^]. length <= 80 
-> ["(", express ion[2].str_va lue, ")"] 

# ["\n", expresslon[1]. padding, "(“, expression^]. str value, ")”]; 

} 

'(' expression units ')' I timing expression 

{ 
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express I on[ 1 ] . length = 2 + expression^] . length + units, length; 
express ion[2] .bcursor = express lon[1] .bcursor + 2 + express ion[2] . length 
+ units. length <= 80 
-> express ion[ 1 ] . bcursor + 1 

# len(expresslon[1]. padding) + 1; 
express lon[2] .padding = expresslon[1]. padding; 
units. bcursor = express lon[2] .ecursor; 
units. padding * express lon[1] . padding; 
expresslon[1] .ecursor = units. ecursor + 1; 

express I on[ 1 ] .str_va lue = express I on[1]. bcursor + 2 + expresslon[2] . length 
+ units, length <= 80 

-> expresslon[2].str_value, units. str_value, “)"] 

# ["\n", expresslon[1]. padding, expression[2].str value, units. str_va lue, 

“)"]; 

} 

TIME I The current local time, used In temporal events 

{ 



expression. length = 5; 

express Ion .ecursor = expression. bcursor + 5 <= 80 
-> expression. bcursor + 5 
# len(expresslon. padding) + 5; 
expression. str_value = express Ion. bcursor + 5 <= 80 
-> “TIME “ 



# ["\n", expression. padding, “TIME "]; 

} 

DELAY I The time between the triggering event and the response 

{ 

expression. length = 6; 

express I on. ecursor = express Ion. bcursor + 6 <= 80 
-> expression. bcursor + 6 

# len(expresslon. padding) + 6; 

expression. str_value = expression. bcursor + 6 <= 80 
-> “DELAY “ 

# ["\n", expression. padding, "DELAY "]; 

} 

PERIOD I The time between successive events of this type 

{ 

expression. length = 7; 

express Ion. ecursor = express I on. bcursor + 7 <= 80 
-> expression. bcursor + 7 

# ien(expresslon. padding) + 7; 

expression. str value = express ion. bcursor + 7 <= 80 
-> “PERIOD ““ 



# ["\n“, expression. padding, “PERIOD “]; 

} 

I iterai 



{ 

expression, length = I iterai . length; 

I Iterai .bcursor = expression. bcursor; 
I iterai .padding = expression. padding; 
expression. ecursor = I iterai .ecursor; 
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expression. str value = llteral.str value; 

} 

literal '«* parametrized name I literal with explicit type 

( 

expression, length = 1 Itera I . length + 1 + parametr ized_name. length; 

I Itera I .bcursor = expression. bcursor; 

I Itera I .padding = expression. padding; 

parametr lzed_name. bcursor = 1 Itera 1 .ecursor + 1 + parametr lzed_name. length <= 80 
-> I Itera I .ecursor + 1 

# lend Iteral .padding); 

parametr I zed_name. padding = spaces(parametr lzed_name. bcursor); 
expression. ecursor = parametr lzed_name. ecursor; 

express Ion. str_value = I Itera I .ecursor + 1 + parametr I zed_name. length <« 80 
-> [I Iteral .str_value, *t", parametr lzed_name.str_va lue] 

# [ I Itera I .str va lue, "§", "Mi", I Iteral. padding, parametr lzed_name.str_va lue]; 

} 

'?' I An undefined value to be specified later 

( 

expression. length = 1 ; 

expression. ecursor = expression. bcursor + 1 <= 80 
-> express Ion. bcursor + 1 

# len(expresslon. padding) + 1; 

express Ion. str value = express Ion. bcursor + 1 <= 80 
-> "?" 

# ["\n", expression. padding, "?"]; 

} 

'I' I An undefined and Illegal value 

{ 

expression. length - 1 ; 

expression. ecursor * expression. bcursor + 1 <= 80 
-> express Ion. bcursor + 1 

# len(expression. padding) + 1; 

express Ion. str_va lue = express Ion. bcursor + 1 <= 80 
-> "I" 

# ["\n", expression. padding, "I”]; 

} 

IF expression THEN expression middle cases ELSE expression FI 

{ 

expresslon[1]. length = 15 + express I on[2]. length + expression^], length 
+ mlddle_cases. length + express I on[4]. length; 
express lon[2]. bcursor - express I on[ 1 ] . bcursor + 3; 
expression^], padding * spaces(expresslon[1]. bcursor); 
express lon[3]. bcursor = express lon[1]. bcursor + 5; 
express lon[3]. padding * spaces(expresslon[1]. bcursor); 
middle cases. bcursor * express lon[1]. bcursor; 
mlddle_cases.paddlng *= spaces(expresslon[1]. bcursor); 
express I on[4] . bcursor - express lon[1]. bcursor + 5; 
expression^]. padding * spaces(expresslon[1]. bcursor); 
expresslon[1]. ecursor = expression^]. ecursor + 4; 
expresslon[1].str_value = expression^]. ecursor + 4 <= 80 
-> ["IF ", expression^]. str_value, "\n“, express ion[3]. padding, "THEN ", 
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express lon[3].str_value, mlddle_cases.str_value, "\n", 
expresslon[4]. padding, "ELSE ", expression^]. str_value, “ FI "] 

# [“IF ", express lon[2] .strva lue, "\n", expression^] . padding, "THEN ", 
express lon[3] .str_value, mlddle_cases.str_value, *'\n", 
expresslon[4] .padding, "ELSE ", expression^] .str_value, "\n", 
expresslon[4]. padding, “ FI "]; 



mlddle_cases 

: middle cases ELSE IF expression THEN expression 

{ 

mlddle_cases[1]. length = 13 + mlddie_cases[2] . length + express lon[1] . length 
+ express lon[2] . length; 

mlddie_cases[2].bcursor = mlddle_cases[1].bcursor; 
mlddle_cases[2]. padding = mlddle_cases[1]. padding; 
express lon[1] .bcursor = mlddle_cases[1].bcursor + 8; 
expresslon[1]. padding = mlddle_cases[l]. padding; 
express lon[2]. bcursor = mlddle_cases[1] .bcursor + 5; 
expression^], padding = mlddle_cases[1] .padding; 
mlddle_cases[1].str_value = [mTddle_cases[2] .str_va lue, "\n", 
mlddle_cases[1]. padding, “ELSE_IF ", expresslon[1].str_value, "\n“, 
mlddle_cases[1].paddlng, "THEN ", express lon[2].str_vaIue]; 



{ 

mlddle_cases. length = 0; 
mlddle_cases.str_value = 



quantifier 
: ALL 

C 

quantifier. length = 3; 

quantif ler.ecursor = quantifier. bcursor <= 80 
-> quantif ler. bcursor + 3 

# ien(quantlf ler. padding) + 3; 

quantif ler. str value = quantif ier. bcursor <= 80 
-> "ALL" 

# ["\n", quantif ler. padding, "ALL"]; 

} 

! SOME 

{ 

quantifier. length = 4; 

quant if ler .ecursor = quantif ler. bcursor <= 80 
-> quantif ler. bcursor + 4 

# I enCquant I f ler. padding) + 4; 

quantif ier. str value = quantif ler. bcursor <= 80 
-> "SOME" 

# ["\n", quantif ler. padding, “SOME"]; 



NUMBER 

{ 

quantlf ier. length = 6; 

quantlf ler.ecursor = quant If ier .bcursor <= 80 
-> quantifier. bcursor + 6 

# ien(quantlf ier. padding) + 6; 

quantlf Ier. str value = quant If Ier .bcursor <= 80 
-> "NUMBER" ’ 

# t"\n”, quantlf Ier. padding, "NUMBER"]; 

} 

SUM 

{ 

quantifier. length = 3; 

quantlf ler.ecursor = quantlf ier. bcursor <= 80 
-> quantlf Ier. bcursor + 3 

# ien(quantlf Ier. padding) + 3; 

quantlf ier. str value = quant if ier .bcursor <= 80 
-> "SUM" 

# f\n", quantlf ier. padding, "SUM"]; 

} 

PRODUCT 

{ 

quantifier . length = 7; 

quantlf ler.ecursor = quant if Ier .bcursor <= 80 
-> quant if Ier. bcursor + 7 

# ien(quantlf ier. padding) + 7; 

quantlf Ier. str_vaiue = quant if ier .bcursor <= 80 
-> "PRODUCT"’ 

# [“\n", quantlf ier. padding, "PRODUCT"]; 

} 

SET 

{ 

quantifier, length «= 3; 

quant if ler.ecursor = quant if ier. bcursor <= 80 
-> quant if ier. bcursor + 3 
« len(quant If ier .padding) + 3; 
quantlf ier. str value = quant If Ier .bcursor <= 80 
-> “SET" 

# ["\n”, quantlf Ier. padding, "SET"]; 

} 

MAXIMUM 

{ 

quantlf ler. length » 7; 

quantlf ler.ecursor = quantlf ier. bcursor <= 80 
-> quantlf ier. bcursor + 7 
« I enfquant i f ier. padding) + 7; 
quantlf ier. str_value = quantlf ler. bcursor <= 80 
-> “MAXIMUM"’ 

# ["\n", quantlf ier. padding, "MAXIMUM"]; 
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| MINIMUM 

{ 

quantifier. length = 7; 

quantlf ier.ecursor = quantlf ler.bcursor <= 80 
-> quant If ler.bcursor + 7 

# len(quantlf ler. padding) + 7; 

quantlf ler.str_value = quantlf ler.bcursor <= 80 
-> "MINIMUM"’ 

# [“\n", quantlf ler. padding, "MINIMUM"]; 

} 

! UNION 
{ 

quantifier. length = 5; 

quantlf Ier.ecursor = quantlf ler.bcursor <= 80 
-> quantlf ler.bcursor + 5 

# len(quantlf ler. padding) + 5; 

quantlf ier.str value = quantlf ler.bcursor <= 80 
-> "UNION" 

# ["\n", quantlf ler. padding, "UNION"]; 

} 

| INTERSECTION 
{ 

quantlf ler. length = 12; 

quant If ler .ecursor = quantlf ler.bcursor <= 80 
-> quantlf ler.bcursor + 12 

# len(quantlf ler. padding) + 12; 

quantlf ler. str_value = quant If ler .bcursor <= 80 
-> "INTERSECTION" 

# ["\n", quantlf ler. padding, "INTERSECTION"]; 



restriction 

: SUCH expression 
{ 

restriction. length = 10 + expression. length; 
expression. bcursor = restr let Ion. bcursor + 10 <= 80 
-> restr let Ion. bcursor + 10 

# I en( restr I ct I on . padding) + 10; 

express I on. padding = spaces(express Ion. bcursor); 
restr let Ion. ecursor = expression. ecursor; 
restr let Ion. str_value = restr let Ion. bcursor + 10 <= 80 
-> [“SUCH THAT ", expresslon.str_value] 

# ["\n", restriction. padding, "SUCH THAT ", expression. strvalue]; 



{ 

restriction. length = 0; 

restriction. ecursor = restr let Ion. bcursor; 

restrlctlon.str_value = 
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I Iteral 

: INTEGER LITERAL 

{ 

I Iteral. length = len( I NTEGER_L ITERAL .Xtext); 

I Iteral .str_value - I Iteral .bcursor + len( INTEGER L ITERAL .next) <= 80 
-> I NTEGER_L ITERAL. next 

# t"\n“, literal .padding, I NTEGER_L ITERAL. next]; 

I Iteral .ecursor = I Iteral .bcursor + len( I NTEGER_L ITERAL. next) <= 80 
-> I Iteral .bcursor + len( INTEGER LITERAL. Xtext) 
t len( I Iteral. padding) + len( INTEGER LITERAL. Xtext); 

} 

| REAL LITERAL 

{ 

I Iteral . length = len(REAL_L ITERAL .Xtext); 

I Iteral. str value = I Iteral .bcursor + len(REAL_L ITERAL. Xtext) <= 80 
-> REAL LITERAL. Xtext 

• t“\n", I Iteral. padding, REAL_L ITERAL. Xtext]; 

I Itera I .ecursor = I Iteral .bcursor + len(REAL_L ITERAL .Xtext) <= 80 
-> I Iteral .bcursor + I en( REAL L ITERAL. Xtext) 

« lend Iteral. padding) + len(REAL LITERAL. Xtext); 

} 

| CHAR LITERAL 

{ 

I Iteral . length = len(CHAR_L ITERAL .Xtext); 

I Iteral. str value = I Iteral .bcursor + I en(CHAR_L I TERAL . Xtext) <= 80 
-> CHARJJTERAL. Xtext 

tt [”\n", I Iteral .padding, CHAR_L ITERAL. Xtext]; 

I Iteral .ecursor = I Iteral .bcursor + len(CHAR LITERAL. Xtext) <= 80 
-> I Iteral. bcursor + len(CHAR L ITERAL. Xtext) 

« . lend Iteral .padding) + len(CHAR LITERAL. Xtext); 

} 

| STRING LITERAL 
{ 

I Iteral . length = len(STR I NG_L ITERAL. Xtext); 

I Iteral. str value = I iteral .bcursor + I en(STR I NG_L ITERAL . Xtext ) <= 80 
-> STR I NG~L I TERAL. Xtext 

« ["\n", ‘literal. padding, STR I NG_L ITERAL. Xtext]; 

I Iteral .ecursor = I Iteral .bcursor + I en (STR I NG LITERAL. Xtext) <= 80 
-> literal .bcursor + I en( STR I NG_L I TERAL . Xtext ) 

• lend Iteral. padding) + len(STRING LITERAL. Xtext); 

) 

| •' NAME I enumeration type literal 

{ 

I Iteral. length - 1 + len(NAME. Xtext); 

I Itera I .ecursor = I Itera I .bcursor + 1 + len(NAME. Xtext) <= 80 
-> I Itera I .bcursor + 1 + len(NAME. Xtext) 

# lend Iteral. padding) + 1 + len(NAME. Xtext); 

I Iteral. str value = I Iteral .bcursor + 1 +len(NAME. Xtext) <- 80 
-> NAME. Xtext] 
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# [“\n“, I Iteral .padding, NAME.Xtext]; 

} 

*[' expressions ']' I sequence literal 

{ 

I Iteral . length = 2 + expressions. length; 
express I ons.bcursor = I Itera I .bcursor + 1 <80 
-> I Iteral .bcursor + 1 

# len( I Iteral .padding) + 1; 

express Ions. padding = spaces( I Itera I .bcursor + 1); 

I Itera I .ecursor - express Ions. ecursor + 1; 

I Iteral .str_value * I Iteral .bcursor + 1 <80 
-> expresslons.str_value, “]“] 

# [“\n“, I Iteral .padding, "[", expressions. str value, 

) 

'{' expressions I set literal 

{ 

I Iteral . length = 2 + expressions. length; 
expressions. bcursor = I Iteral .bcursor +1 <80 
-> I Iteral .bcursor + 1 

# I en( I Iteral .padding) + 1; 

expressions. padding = spaces( I Iteral .bcursor + 1); 

1 Iteral .ecursor = express Ions. ecursor + 1; 

I Iteral .str_value = I Iteral .bcursor + 1 <80 
-> expresslons.str_value, ■}"] 

# [“\n", I Iteral .padding, expressions. str value, “}“]; 

} 

expression comment expressions I map literal 

{ 

I Iteral . length = 3 + expression. length + comment. length + express ions. length; 
comment. bcursor = express ion. ecursor + 1; 
expression. bcursor = I Iteral .bcursor + 1 <80 

-> I Iteral .bcursor + 1 

# I en ( I Iteral .padding) + 1; 

expression. padding - spaces(expresslon. bcursor); 
express Ions. bcursor = comment. length > 0 
-> len(expression. padding) 

# expression. ecursor +2 <80 
-> expression. ecursor + 1 

# len(expresslon. padding); 
expressions. padding = expression. padding; 

I Itera I .ecursor = expressions. ecursor + 1; 

I Itera I .str_va lue * (comment. length > 0) && (I Iteral .bcursor + 1 < 80) 

-> expression. str_value, comment. str_va lue, expression. padding, 

expressions. str_value, ")"] 

# (comment. length > 0) && ( I Iteral .bcursor + 1 >= 80) 

-> [“\n", I Iteral .padding, “{", expression. str_va lue, comment .str_va lue, 
express I on. padding, expressions. str_value, "}"] 

# (comment. length == 0) && ( I Iteral .bcursor + 1 < 80) 

&& (express Ion. ecursor + 3 <* 80) 

-> expression. strvalue, "; ", comment. str_va lue, expressions. str_value. 
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# (comment. length == 0) && ( I itera I .bcursor + 1 >= 80) 

&& (express ion. ecursor + 3 <= 80) 

-> ["Xn", I iteral .padding, expression. str_value, ", comment. str_va lue, 
expressions. str_value, "}"] 

tt (comment, length -= 0) && ( I Itera I .bcursor + 1 < 80) 

&& (expression. ecursor + 3 <* 80) 

-> expression. str_value, ", "\n”, expression. padding, 

comment. str_va lue, express ions. str_va lue, “}"] 

• ["Xn", I Iteral .padding, "{", expression. str_value, ", "Xn", 

expression. padding, comment. str value, expressions. str value, 

} 

i '[' pair 1 1st ']' I tuple I Iteral 

{ 

I Iteral . length = 2 + palrj 1st. length; 
palrj 1st. bcursor = I Itera I .bcursor +1 <80 
-> I Itera I .bcursor + 1 

• lend Iteral .padding) + 1; 

palrj 1st. padding = spaces( I Iteral .bcursor + 1); 

I iteral .ecursor = palrj 1st. ecursor + 1; 

I Iteral .str_va lue = I Itera I .bcursor +1 <80 

-> ["[", palrj I st. str j^a lue, "]’] 

« ["Xn", I Iteral .padding, "[", pair 1 1st. str value, 

) 

! '{' pair ')' I one of I Iteral 

{ 

I Iteral . length = 2 + pair. length; 
pair. bcursor = I Itera I .bcursor + 1 < 80 
-> I itera I .bcursor + 1 

# len( I Itera I .padding) + 1 ; 

pair. padding = spaces( I Iteral .bcursor + 1); 

I Itera I .ecursor = pair. ecursor + 1; 

I Iteral ,str_value = I Itera I .bcursor +1 <80 

-> [“(“, pair. str jalue, “)“] 

« ["Xn”, I iteral .padding, "{", pair. str jalue, 



I relation literals are sets of tuples 

expressions 

: expression 1 1st 
{ 

expressions. length = express I on_ 1 1st. length; 
expresslonj 1st. bcursor * express Ions. bcursor; 
expresslonj 1st. padding = expressions. padding; 
express Ions. ecursor = expressionj 1st. ecursor; 
expressions. str value = expresslonj lst.str_value; 



{ 

expressions. length = 0; 

expressions. ecursor = express Ions. bcursor; 
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express ions. str value = ; 

} 



palrj 1st 

: pair list V Pair 
{ 

palrj I st [ 1 ] . length * pair ! ist[2]. length + 2 + pair, length; 
palrj ist[2].bcursor = palrj I st [ 1 ] .bcursor; 
pair_l I st [ 1 ] . ecursor = pair .ecursor; 
palrj I st [2] . padding = palrj I st[ 1 ] . padding; 
pair. bcursor = palrj I st [2] .ecursor + 2 <= 80 
-> palrj 1st [2] . ecursor + 2 

# len(pair_i I st [ 1 ] . padding); 

palrj lst[1].str_vaiue = palrj ist[2] .ecursor + 2 <= 80 
-> [palrj lst[2].str_value, ", ", pair .strvalue] 

# [palr_l lst[2].str_vaiue, “, ”, ‘An", palrj 1st [ 1 ] .padding, pair.str_vaiue]; 
pair. padding = pair_l I st [ 1 ] . padding; 

} 

| NAME pair 

{ 

palrj 1st. length = len(NAME. Xtext) + pair. length; 
pair. bcursor = palrj 1st. bcursor + len(NAME. Xtext) <= 80 
-> palrj 1st. bcursor + len(NAME. Xtext) 

# len(pair_l 1st. padding) + len(NAME. Xtext); 
pair. padding = pa I r_ 1 1st. padding; 

palrj 1st. ecursor = pair. ecursor; 

palrj 1st .str_value = palrj 1st. bcursor + len(NAME. Xtext) <= 80 
-> [NAME .Xtext , pair.strjaiue] 

# ["\n", pair! 1st. padding, NAME. Xtext, palr.str_vaiue]; 

} 

! pair 
{ 

palrj 1st. length = pair. length; 
pair. bcursor = palrj 1st. bcursor; 
pair. padding = palrj 1st. padding; 
palrj 1st. ecursor = pair. ecursor; 
pair I Ist.str jaiue = pair.str value; 

} 



: NAME BIND expression 

{ 

pair. length = ien(NAME. Xtext) + 4 + expression. length; 
expression. bcursor = pair. bcursor + len(NAME. Xtext) + 4 <= 80 
-> pair. bcursor + len(NAME. Xtext) + 4 
# len(pair. padding) + len(NAME. Xtext) + 4; 
pair. ecursor * express I on. ecursor; 
expression. padding = pair. padding; 

pair. str jaiue = pair. bcursor + ien(NAME. Xtext) + 4 <= 80 
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-> [NAME . Xt ext , " :: ", express Ion .str_va lue] 

* ["\n", pair. padding, NAME .Xtext, ” :: ", expression. str_value]; 



units 

: NANOSEC 

{ 

units. length = 8; 

units. ecursor = units. bcursor + 8 < 80 
-> units. bcursor + 8 

# I enCun i ts . padding) + 8; 

units. str value = units. bcursor + 8 < 80 
-> "NANOSEC” 

# [”\n\ units. padding, "NANOSEC"]; 

} 

! MICROSEC 

{ 

units. length = 8; 

units. ecursor = units. bcursor + 8 < 80 
-> units. bcursor + 8 

# len(units. padding) + 8; 

units. str value = units. bcursor + 8 < 80 
-> "MICROSEC" 

# ["\n“, units. padding, "M I CROSEC “ ] ; 

) 

! MILL 1SEC 

{ 

units. length = 8; 

units. ecursor = units. bcursor + 8 < 80 
-> units. bcursor + 8 

# len(unlts. padding) + 8; 
unlts.str_vaiue = units. bcursor + 8 < 80 

-> "MILL ISEC" 

# ["\n" , units. padding, "MILLISEC"]; 

} 

! SECONDS 

{ 

units. length = 7; 

units. ecursor = units. bcursor + 7 < 80 
-> units. bcursor + 7 

# len(unlts. padding) + 7; 

units. str value = units. bcursor + 7 < 80 
-> "SECONDS" 

# [“\n", units. padding, “SECONDS"]; 

) 

i MINUTES 

{ 

units. length = 7; 

units. ecursor = units. bcursor + 7 < 80 
-> units. bcursor + 7 
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# ien(un its . padding) + 7; 

units. str_vaiue = units.bcursor + 7 < 80 
-> "MINUTES" 

« [“\n\ units. padding, "MINUTES"]; 

} 

i HOURS 
( 

units, length = 5; 

units. ecursor ■= units.bcursor + 5 < 80 
-> units.bcursor + 5 

# len(unlts. padding) + 5; 

units. str value = units.bcursor + 5 < 80 
-> "HOURS" 

« ["\n", units. padding, "HOURS"]; 

} 

! DAYS 
{ 

units. length = 4; 

units. ecursor = units.bcursor + 4 < 80 
-> units.bcursor + 4 

# len(unlts. padding) + 4; 

units. str value = units.bcursor + 4 < 80 
-> "DAYS" 

# [”\n", units. padding, "DAYS"]; 

} 

| WEEKS 

{ 

units. length = 5; 

units. ecursor = units.bcursor + 5 < 80 
-> units.bcursor + 5 

# len(units. padding) + 5; 

units. str_vaiue = units.bcursor + 5 < 80 
-> "WEEKS" 

# ["\n", units. padding, "WEEKS"]; 



operator _l 1st 

: operator list operator symbol 

{ 

operatorj 1st [ 1 ] . length = operatorj 1st [2] . length + operator_symbo I . length; 
operatorj ist [2] .bcursor = operatorj 1st [ 1 ] .bcursor; 
operatorj lst[2] . padding = operatorj ist[1]. padding; 
operatorj lst[1] .ecursor = operator_symbo I .ecursor; 
operator_symbo I .padding = operatorj 1st [ 1 ] .padding; 
operator_symbo I .bcursor = operatorj ist [2] .ecursor; 
operatorj ist[1] .str_va iue = [operatorj ist[2].str_value, 
operator symbol. str value ]; 

} 

! operator symbol 
{ 
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operatorj ist. length = operator_symbol . length; 
operatorl ist.ecursor » operator_symbo I .ecursor; 
operator_symbol .bcursor = operator_l Ist.bcursor; 
operator_syinbol .padd Ing = operator_l ist. padding; 
operator llst.str value = operator symbol. str value; 

} 



operator syibol 
; NOT 
{ 

operator_symbo I . length = 2; 

operator_symbol .str_value = operator_symbo I .bcursor + 2 <= 80 

# [”\n", operator_symbol .padding, "]; 
operator_symbo I .ecursor = operator symbol .bcursor + 2 <- 80 

-> operator_symbo I .bcursor + 2 

# len(operator symbol .padding) + 2; 

} 

| AND 

{ 

operator_symbol . length = 2; 

operator symbol. str value = operator symbol .bcursor + 2 <= 80 
-> “4 ■ 

# [”\n", operator_symbol .padding, "4 "]; 
operator_symbol .ecursor = operator_symbo I .bcursor + 2 <= 80 

-> operator_symbo I .bcursor + 2 

# len(operator symbol .padding) + 2; 

} 

i OR 

{ 

operator_symbo I . length = 2; 

operator_symbol .str value = operator symbo I .bcursor + 2 <- 80 

« ["\n", operator_symbol .padding, "| “]; 

operator_symbol .ecursor = operator_symbo I .bcursor + 2 <= 80 
-> operator_symbo I .bcursor + 2 

# len(operator_symbol .padding) + 2; 

} 

: IMPLIES 
{ 

operator_symbo I . length * 3; 

operator_symbol .str value « operator_symbo I .bcursor + 3 <= 80 

» [”\n“, operator_symbol .padding, M «> “]; 
operator_symbo I .ecursor = operator_symbo I .bcursor + 3 <= 80 
-> operator symbol .bcursor + 3 
» len(operator_syrabol .padding) + 3; 

} 

! IFF 
{ 
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operator_symt>o I . length = 4; 

operator_symbol .str_value = operator_symbol .bcursor + 4 <= 80 

# ["\n", operator_symbol .padding, "<=> “]; 
operator_symbol .ecursor = operator_symbo I .bcursor + 4 <= 80 

-> operator_symbo I .bcursor + 4 

# len(operator_symbo I .padding) + 4; 



{ 

operator_symbo I . length = 2; 

operator_symbol .str_value = operator_symbo I .bcursor + 2 <= 80 

* ["\n", operator_synbol .padding, ’< "]; 
operatorsymbo I .ecursor - operator_symbo I .bcursor + 2 <* 80 

-> operator_symbo I .bcursor + 2 

# len(operator_symbol .padding) + 2; 



{ 

operator_symbo I . length = 2; 

operatorsymbol .str_value = operatorsymbo I .bcursor + 2 <= 80 

# ["\n“, operator_symbol .padding, "> "]-, 
operator_symbo I .ecursor ■ operator_symbo I .bcursor + 2 <= 80 

-> operator_symbo I .bcursor + 2 

# len(operator_symbol .padding) + 2; 



{ 

operator_symbo I . length = 2; 

operator_symbol .str_value = operator_symbo I .bcursor + 2 <= 80 

# ["Xn”, operator_symbo I .padding, "= ”]; 
operator_symbo I .ecursor = operator_symbol .bcursor + 2 <= 80 

-> operator_symbo I .bcursor + 2 

# len(operator symbol .padding) + 2; 

} 

LE 

{ 

operator_symbo I . length = 3; 

operator_symbol .str_value = operator_symbo I .bcursor + 3 <= 80 

# ["Xn", operator_symbo I .padding, "<= “]; 
operator_symbo I .ecursor = operator_symbo I .bcursor + 3 <= 80 

-> operator_symbo I .bcursor + 3 

# len(operator symbol .padding) + 3; 

} 

GE 

{ 

operator_symbo I . length = 3; 
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operator_symbol ,str_value = operator_symbo I .bcursor + 3 <= 80 

# ["\n” , operator_symbo I .padding, M >= “]; 
operator_symbol .ecursor = operator_symbo I .bcursor + 3 <= 80 

-> operator_symbo I .bcursor + 3 

# len(operator symbol .padding) + 3; 

} 

NE 

{ 

operator_symbol . length = 3; 

operator_symbol .str_value = operator_symbo I .bcursor + 3 <= 80 

# [“\n", operator_symbol .padding, "'= "]; 
operator_symbo I .ecursor « operator_symbo I .bcursor + 3 <= 80 

-> operator_symbo I .bcursor + 3 

# len(operator_symbol .padding) + 3; 

} 

NLT 

{ 

operator_symbo I . length = 3; 

operator_symbol .strvalue = operator_symbo I .bcursor + 3 <= 80 

# [“\n", operator_symbo I .padding, "'< “]; 
operator_symbo I .ecursor = operator_symbo I .bcursor + 3 <= 80 

-> operator_symbo I .bcursor + 3 

# len(operator symbol .padding) + 3; 

} 

NGT 

{ 

operator symbol . length = 3; 

operator_symbol .str_value = operator_symbo I .bcursor + 3 <= 80 

# ["\n", operator_symbol .padding, “'> "]; 
operator_symbo I .ecursor = operator_symbo I .bcursor + 3 <= 80 

-> operator_symbol .bcursor + 3 

# len(operator symbol .padding) + 3; 

} 

NLE 

( 

operator_symbo I . length = 4; 

operator_symbol .str_value = operator_symbo I .bcursor + 4 <= 80 

# [”\n“, operator_symbo I .padding, ”"<* "]; 
operator_symbol .ecursor = operator_symbo I .bcursor + 4 <= 80 

-> operator_symbo I .bcursor + 4 

# len(operator symbol .padding) + 4; 

} 

NGE 

{ 

operator symbol . length = 4; 

operator symbol. str value * operator_symbo I .bcursor + 4 <= 80 
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# ["\n", operator_syinbo I .padding, "”>= "]; 
operator_symbol .ecursor = operator_symbol .bcursor + 4 <= 80 

-> operator_symbo I .bcursor + 4 

# len(operator symbol .padding) + 4; 

} 

EQV 

{ 

operator_symbo I . length = 3; 

operator_symbol .str_value = operator_symbo I .bcursor + 3 <= 80 

# [“\n“, operator_symbo I .padding, ”== “]; 
operator_symbo I .ecursor = operator_symbo I .bcursor + 3 <= 80 

-> operator_symbo I .bcursor + 3 

# len(operator symbol .padding) + 3; 

} 

NEQV 

{ 

operator_symbo I . length = 4; 

operator symbol. str value = operator symbol .bcursor + 4 <= 80 

# [“\n“, operator_symbol .padding, ""== “]; 
operator_symbo I .ecursor = operator_symbo I .bcursor + 4 <= 80 

-> operator_symbo I .bcursor + 4 

# len(operator_symbo I .padding) + 4; 



{ 

operator_symbo I . length = 2; 

operator_symbol .str_value = operator_symbo I .bcursor + 2 <= 80 

# ["\n", operator_symbol .padding, "+ “]; 
operator_symbo I .ecursor = operator_symbo I .bcursor + 2 <= 80 

-> operator_symbo I .bcursor + 2 

# len(operator_symbo I .padding) + 2; 



{ 

operatorsymbo I . length = 2; 

operator_symbol .str_value = operator_symbo I .bcursor + 2 <= 80 

« [‘An", operator_symbo I .padding, "]; 
operator_symbo I .ecursor «= operator_symbo I .bcursor + 2 <= 80 
-> operator_symbo I .bcursor + 2 
# len(operator_symbo I .padding) + 2; 



{ 

operator_symbo I . length = 2; 

operator_symbol .strvalue = operatorsymbo I .bcursor + 2 <= 80 
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# ["Xn", operator_symbo I .padding, ”* “]; 
operator_symbol .ecursor = operator_symbol .bcursor + 2 <= 80 

-> operator_symbo I .bcursor + 2 
« len(operator symbol .padding) + 2; 

} 

'/' 

{ 

operator_symbo I . length = 2; 

operator_symbol .str value = operator symbo I .bcursor + 2 <= 80 
-> “/ ■ 

tt [”\n“, operator_symbo I .padding, V “]; 
operator_symbo I .ecursor = operator_symbo I .bcursor + 2 <- 80 
-> operator_symbo I .bcursor + 2 
tt len(operator_symbol .padding) + 2; 

} 

MOD 

{ 

operator_symbol . length = 4; 

operator_symbol .str value = operator symbol .bcursor + 4 <= 80 
-> "MOD " 

tt ["\n", operator_symbo I .padding, "MOD “]; 
operator_symbol .ecursor = operator_symbo I .bcursor + 4 <= 80 
-> operator_symbo I .bcursor + 4 
tt len(operator symbol .padding) + 4; 

} 

EXP 

{ 

operator_symbo I . length = 3; 

operator_symbol .str_value = operator symbol .bcursor + 3 <= 80 

tt [“\n", operator_symbol .padding, “*• “]; 
oper.ator_symbo I .ecursor = operator_symbo I .bcursor + 3 <= 80 
-> operator_symbo I .bcursor + 3 
t len(operator_symbol .padding) + 3; 

} 

U 

{ 

operator symbo I . length - 2; 

operator symbol .str_value = operator_symbo I .bcursor + 2 <= 80 
-> ”U ~ 

tt ["\n", operator_symbo I .padding, “U “]; 
operator_symbo I .ecursor = operator_symbo I .bcursor + 2 <= 80 
-> operator symbo I .bcursor + 2 
t len(operator symbol .padding) + 2; 

} 

APPEND 

{ 

operator_symbo I . length = 3; 

operator_symbol .str_value = operator_symbo I .bcursor + 3 <= 80 

# [“\n", operator_symbo I .padding, "!! "]; 
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operator_symbol .ecursor = operator_symbol .bcursor + 3 <= 80 
-> operator_symbo I .bcursor + 3 
« len(op8rator symbol .padding) + 3; 

} 

IN 

{ 

operator symbol . length = 3; 

operator symbol. str value = operator symbol .bcursor + 3 <= 80 
-> "IN - " 

* ["\n“ , operator_symbo I .padding, “IN “]; 

operator symbol .ecursor = operator_symbo I .bcursor + 3 <= 80 
-> operator_symbo I .bcursor + 3 

* len(operator symbol .padding) + 3; 

} 

i RANGE 
{ 

operator_symbo I . length = 3; 

operator_symbol .str_value = operator_symbo I .bcursor + 3 <= 80 

# ["\n", operator_symbol .padding, ”]; 
operator_symbo I .ecursor = operator_symbo I .bcursor + 3 <= 80 

-> operator_symbo I .bcursor + 3 

# len(operator_symbol .padding) + 3; 



{ 

operator_symbo I . length = 2; 

operatorsymbol .str_value = operator_symbo I .bcursor + 2 <= 80 

* ["\n“, operatorsymbol .padding, ”. “]; 
operator_symbo 1 .ecursor = operator_symbo I .bcursor + 2 <= 80 

-> operator_symbo I .bcursor + 2 

# len(operator symbol .padding) + 2; 

} 

! '[' 

{ 

operator_symbo I . length = 2; 

operator symbol .str_value = operator_symbo I .bcursor + 2 <= 80 
-> ■[ ■ 

ft ["\n“, operator_symbol .padding, “[ "]; 
operator_symbo I .ecursor = operator_symbo I .bcursor + 2 <= 80 
-> operator_symbo I .bcursor + 2 
ft len(operator_symbo I .padding) + 2; 



comment 

: COMMENT comment 

{ 

comment[1].str_value = comment[1]. bcursor == 0 
-> [COMMENT. itext,comment[2] .str_value] 
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tt comment [1 ] .bcursor + 2 + len(COMMENT.Xtext) <= 80 
-> [“ ”, COMMENT. Xtext, comment[2] .str_va lue] 

# ["\n", COMMENT. Xtext, comment[2] .str_va lue] ; 

comment[2]. bcursor = 0; 

comment[1] . length = len(COMMENT.Xtext) + comment[2] . length; 

} 

Xprec SEMI 

( 

comment. str_va lue = 
comment. length = 0; 
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APPENDIX C 



SAMPLE INPUT 1 



FUNCTION square_root {precision: real) WHERE precision > 0.0 
MESSAGED: real) 

WHEN x >= 0.0 
REPLY(y : real) 

WHERE y >= 0.0 & approxlmates(y * y, x) 

OTHERWISE REPLY EXCEPTION I mag lnary_square_root 
CONCEPT approx Imates(r1 r2: real) 

— True If rl Is a sufficiently accurate approximation of r2. 

— The precision Is relative rather than absolute. 

VALUE(b: boolean) 

WHERE b <=> abs((r1 - r2) / r2) <= precision 
END 
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SAMPLE OUTPUT 1 



FUNCTION square_root{precision : real} 

WHERE precision > 0.0 

MESSAGE (x : real) 

WHEN X >= 0.0 

REPLY (y : real) 

WHERE y >= 0.0 & approx lmates(y * y, x) 

OTHERWISE 

REPLY EXCEPTION imaginary_square_root 

CONCEPT approx imates(r1 r2 : real) 

— True if rl is a sufficiently accurate approximation of r2. 

— The precision is relative rather than absolute. 



VALUE (b : boolean) 

WHERE b <=> abs((r1 - r2) / r2) <= precision 
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SAMPLE INPUT 2 



TYPE rational INHERIT equal lty(rat Iona I } 

M0DEL(num den: Integer) 

INVARIANT ALL ( r : rational :: r.den "= 0) 

MESSAGE ratio(num den: integer) 

WHEN den "= 0 REPLY ( r : rational) 

WHERE r.num = nun, r.den = den 
OTHERWISE REPLY EXCEPTION zero denominator 
MESSAGE add(x y: rational) OPERATOR + 

REPL Y( r : rational) 

WHERE r.num = x.num * y.den + y.num * x.den, r.den = x.den * y.den 

MESSAGE mult ip iy(x y: rational) OPERATOR * 

REPLY ( r : rational) 

WHERE r.num = x.num * y.num, r.den = x.den * y.den 

MESSAGE equal (x y : rational) OPERATOR = 

REPL Y(b : boolean) 

WHERE b <=> (x.num * y.den = y.num * x.den) 

END 
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SAMPLE OUTPUT 2 



TYPE rational 

INHERIT equal lty{rat Iona I } 

MODEL (num den : Integer) 

INVARIANT ALL ( r : rational :: r.den '= 0) 

MESSAGE ratlo(num den : Integer) 

WHEN den '= 0 

REPLY (r : rational) 

WHERE r.num = num, r.den = den 
OTHERWISE 

REPLY EXCEPTION zero_denom Inator 

MESSAGE add(x y : rational) OPERATOR + 

REPLY (r : rational) 

WHERE r.num = x.num * y.den + y.num * x.den, r.den = 

MESSAGE mult Ip ly(x y : rational) OPERATOR * 

REPLY (r : rational) 

WHERE r.num = x.num * y.num, r.den = x.den * y.den 

MESSAGE equal(x y : rational) OPERATOR = 

REPLY (b : boolean) 

WHERE b <=> (x.num * y.den = y.num * x.den) 

END 



x.den * y.den 
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SAMPLE INPUT 3 



MACHINE air I lne_manager_ Interface STATE (?) INVARIANT? INITIALLY? 

MESSAGE add_f I Ight ( i : fllghtjd, price: money, origin destination: airport, 
departure arrival: time, capacity: nat) WHEN ? — new flight REPLY done 
TRANSITION ? - add flight 
OTHERWISE REPLY EXCEPTION f I lght_ex Ists 

MESSAGE drop fllghtd: flight Id) WHEN ? — flight exists REPLY done 
TRANSITION ?"— remove flight" OTHERWISE REPLY EXCEPTION no_such_f I Ight 
MESSAGE new_fare(l: fllghtjd, price: money) 

WHEN ?— flight exists REPLY done TRANSITION ?— change fare 

OTHERWISE REPLY EXCEPTION no SUCh flight 

END 
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SAMPLE OUTPUT 3 



MACHINE air I lne_manager_lnterface 

STATE (?) 

INVARIANT ? 

INITIALLY ? 

MESSAGE add_flight(i : fllghtjd, price : money, origin destination : airport, 
departure arrival : time, capacity : nat) 

WHEN ? — new flight 

REPLY done 

TRANSITION? —add flight 
OTHERWISE 

REPLY EXCEPTION f I I ght _ex i sts 

MESSAGE drop_f 1 1 ght ( i : flight id) 

WHEN ? — flight exists 

REPLY done 

TRANSITION? - remove f 1 1 ght 
OTHERWISE 

REPLY EXCEPTION no_such_f 1 1 ght 

MESSAGE new fared : flight Id, price : money) 

WHEN? Sought exists 

REPLY done 

TRANSITION ? — change fare 
OTHERWISE 

REPLY EXCEPTION no_such_f 1 1 ght 
END 
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SAMPLE INPUT 4 



MACHINE sender STATE(data: sequence{block}) INVARIANT true INITIALLY true 
MESSAGE send(f lie: sequence{b lock}) WHEN length(file) > 0 
SEND f I rst (b : block) TO receiver WHERE b = flle[l] 

TRANSITION data = f i le 

OTHERWISE REPLY EXCEPTION empty f I le 

MESSAGE echo(b: block) 

WHEN b = *data[1] & length(*data) > 1 

SEND next(b1 : block) TO receiver WHERE bl = data[1] 

TRANSITION ‘data = b J ! data 

WHEN b = *data[1] & length(‘data) = 1 

SEND done TO receiver 

SEND done TO sender 

TRANSITION data = [ ] 

OTHERWISE SEND retransmlt(b2: block) TO receiver WHERE b2 = data[1] 

MESSAGE done 

TRANSACTION transfer = send ; DO echo OD ; done 
END 
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SAMPLE OUTPUT 4 



MACHINE sender 

STATE (data : sequence{b lock}) 
INVARIANT true 
INITIALLY true 

MESSAGE send(flle : sequence(block)) 
WHEN length(f I le) > 0 
SEND f lrst(b : block) 

TO receiver 
WHERE b = f I le[1] 

TRANSITION data = file 
OTHERWISE 

REPLY EXCEPTION emptyf I le 

MESSAGE echo(b : block) 

WHEN b = *data[1] & length(»data) 
SEND next(b1 : block) 

TO receiver 
WHERE bl = data[1] 
TRANSITION ‘data - b j ! data 
WHEN b = *data[ 1 ] & length(*data) 
SEND done 
TO receiver 
SEND done 
TO sender 

TRANSITION data = [] 

OTHERWISE 

SEND retransm It(b2 : block) 

TO receiver 
WHERE b2 = data C 1 ] 

MESSAGE done 

TRANSACTION transfer = send; DO echo 



= 1 



OD; done 
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SAMPLE INPUT 5 



TYPE char INHERIT equa I Ity(char) INHERIT tota l_order{char} 

M0DEL(code : nat) — ASCII codes 
INVARIANT ALL(c: char :: 0 <= c.code <= 127) 

MESSAGE create(n: nat) — literal 'a' = create(97) and so on 
WHEN 0 <= n <= 127 REPLY(c: char) WHERE c.code = n 
OTHERWISE REPLY EXCEPTION I I lega l_code 

MESSAGE ordlnaKc: char) REPLY (n : nat) WHERE n = c.code 

MESSAGE equal (cl c2: char) REPLY Cb : boolean) WHERE b <=> (cl. code = c2.code) 

MESSAGE Iess(c1 c2: char) REPLY (b : boolean) WHERE b <=> (cl. code < c2.code) 

MESSAGE I etter (c : char) REPLY (b : boolean) WHERE b <=> c IN ['a' .. 'z'] j c IN 
C'A' .. 'Z'] 

MESSAGE d I g I t (c : char) REPLY (b : boolean) WHERE b <=> c IN ['O' .. '9'] 

END 
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SAMPLE OUTPUT 5 



TYPE char 

INHERIT equal ity{char} 

INHERIT tota l_order{char) 

MODEL (code : nat) — ASCII codes 

INVARIANT ALL(C : Char : : 0 <= C.COde <= 127) 

MESSAGE create(n : nat) — literal 'a' = create(97) and so on 

WHEN 0 <« n <= 127 
REPLY (c : char) 

WHERE c.code = n 
OTHERWISE 

REPLY EXCEPTION 1 1 1 ega I code 

MESSAGE ordlnal(c : char) 

REPLY (n : nat) 

WHERE n = c.code 

MESSAGE equal (cl c2 : char) 

REPLY (b : boolean) 

WHERE b <=> (cl .code = c2.code) 

MESSAGE Iess(c1 c2 : char) 

REPLY (b : boolean) 

WHERE b <*> (cl. code < c2.code) 

MESSAGE letter(c : char) 

REPLY (b : boolean) 

WHERE b <=> C IN ['a' .. 'Z'] | C IN ['A' .. 'Z'] 

MESSAGE d ig I t(c : char) 

REPLY (b : boolean) 

WHERE b <=> C IN ['O' .. '9') 

END 
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SAMPLE INPUT 6 



MACHINE Inventory — assumes that shipping and supplier are other modules. 

STATE (stock : map{ltem, Integer)) 

INVARIANT ALL ( i : Item :: stock[i] >= 0) 

INITIALLY ALL( I : Item :: StoCk[l] = 0) 

MESSAGE received: item, q: integer) — Process a shipment from a supplier. 

WHEN q > 0 

TRANSITION stock[i] = *stock[l] + q 
— Delayed responses to backorders are not shown here. 

OTHERWISE REPLY EXCEPTION empty_sh Ipment 

MESSAGE order ( I o : Item, qo: Integer) 

— Process an order from a customer. 

WHEN 0 < qo <= stock[io] 

SEND ship(is: Item, qs: integer) TO shipping WHERE is = lo, qs = qo 
TRANSITION stock[lo] + qo = *stock[lo] 

WHEN 0 < qo > stock[lo] SEND ship(ls: item, qs: Integer) TO shipping 
WHERE is = lo, qs = stock[lo] 

SEND back order(lb: Item, qb: Integer) TO supplier 
WHERE lb = 10, qb + qs = qo 
TRANSITION stock[lo] = 0 
OTHERWISE REPLY EXCEPTION empty order 
END 
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SAMPLE OUTPUT 6 



MACHINE inventory — assumes that shipping and supplier are other modules. 



STATE (stock : map{ltem, integer}) 

INVARIANT ALL( I : Item :: StOCk[l] >= 0) 

INITIALLY ALL( I : Item :: stock[l] = 0) 

MESSAGE recelve(l : Item, q : Integer) 

— Process a shipment from a supplier. 

WHEN q > 0 

TRANSITION stock[l] = *stOCk[l] + q 

— Delayed responses to backorders are not shown here. 

OTHERWISE 

REPLY EXCEPTION empty_sh Ipment 

MESSAGE order(io : Item, qo : Integer) — Process an order from a customer. 

WHEN 0 < qo <= stock[ I o] 

SEND shlp(ls : Item, qs : Integer) 

TO shipping 

WHERE Is = lo, qs = qo 
TRANSITION stock[lo] + qo = *stock[lo] 

WHEN 0 < qo > stock[ lo] 

SEND shlp(ls : Item, qs : Integer) 

TO shipping 

.WHERE is = lo, qs = stock[lo] 

SEND back_order( lb : Item, qb : Integer) 

TO suppl ler 

WHERE ib = lo, qb + qs = qo 
TRANSITION stock[ lo] = 0 
OTHERWISE 

REPLY EXCEPTION empty order 
END 
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SAMPLE INPUT 7 



VIRTUAL TYPE number{t: type} 

INHERIT equal lty{t} 

EXPORT commutative associative distributive 
MODEL 

INVARIANT true 
MESSAGE zero 
REPLY(n : t) 

MESSAGE one 
REPLY(n: t) 

MESSAGE plus(n1 n2: t) OPERATOR + 

REPLY( 13: t) 

WHERE ALL(n : t :: n + zero = n), commutatlve(plus), associatlve(plus) 
MESSAGE t Imes(n1 n2: t) OPERATOR * 

REPLY ( 13: t) 

WHERE ALL(n: t :: n * zero = zero), 

ALL ( n : t : : n * one = n), 

commutatlve(tlmes), assoclatlve(tlmes), cJ I str I but I ve(p I us , times) 
CONCEPT commutative(f : FUNCTION) 

VALUE(b: boolean) 

WHERE b <=> domaln(f) = [t, t] & range(f) = t 
& ALL(X y: t :: f(X, y) = f(y, Z)) 

CONCEPT assoclatlve(f : FUNCTION) 

VALUE (b : boolean) 

WHERE b <=> domaln(f) = [t, t] & range(f) = t 
& ALL C x yz:t :: f(x, f(y, z)) = f(f(x, y), z)) 

CONCEPT d I str I but I ve( f g: FUNCTION) 

VALUE (b : boolean) 

WHERE b <=> domaln(f) = [t, t] & range(f) = t 
& domaln(g) = [t, t] & range(g) = t 
& ALL (x y z: t :: g(x, f(y, z)) = f(g(x, y), g(x, z))) 

END 



SAMPLE OUTPUT 7 



VIRTUAL TYPE number{t : type} 

INHERIT equal ity{t} 

EXPORT commutative associative distributive 
MODEL 

INVARIANT true 

MESSAGE zero 
REPLY (n : t) 

MESSAGE one 
REPLY (n : t) 

MESSAGE plus(n1 n2 : t) OPERATOR + 

REPLY (13 : t) 

WHERE ALL(n : t :: n + zero = n), commutat i ve(p lus) , assoclative(plus) 

MESSAGE tlmes(n1 n2 : t) OPERATOR * 

REPLY (13 : t) 

WHERE ALL (n : t :: n * zero = zero), ALL(n : t :: n • one = n), 

commutatlve(tlmes), assoclat I ve (t imes) , d i st r I but I ve(p lus, times) 

CONCEPT commutat I ve(f : FUNCTION) 

VALUE (b : boolean) 

WHERE b 

<=> domaln(f) = [t, t] & range(f) = t 
& ALL(x y : t :: f(x, y) = f(y, z)) 

CONCEPT assoclat I ve(f : FUNCTION) 

VALUE' (b : boolean) 

WHERE b 

<=> domaln(f) = [t, t] & range(f) = t 

& ALL(x y z : t :: f(x, f(y, z)) = f(f(x, y), z)) 

CONCEPT distrlbut lve(f g : FUNCTION) 

VALUE (b : boolean) 

WHERE b 

<=> domaln(f) = [t, t] & range(f) = t & domaln(g) = [t, t] 

& range(g) = t 

& ALL(x y z : t :: g(x, f(y, z)) = f(g(x, y), g(x, z))) 
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SAMPLE INPUT 8 



MACHINE airi inejnanager 
INHERIT format ~ 

IMPORT edit fiightjd money airport time FROM travel_agent 
STATE 

INVARIANT true 
INITIALLY true 

MESSAGE (command: string) 

— command from airline manager's keyboard 
WHEN add_f I ight(edlt(command), I, price, origin, destination, 
departure, arrival, capacity) 

SEND add_f I ight( I : fiightjd, price: money, origin destination: airport, 
departure arrival: time, capacity: nat) 

TO a i r i I ne_reservat I on_system 
WHEN dropji ight(edit(command), i) 

SEND dropj I ight( I : fiightjd) 

TO airi lne_reservatlon_system 

WHEN newJare(edit(command), I, price) 

SEND newjare(i: fiightjd, price: money) 

TO air i ine_reservation system 
OTHERWISE REPLY (s : string) 

WHERE s = "command not recognized" 

— normal responses 

MESSAGE done SEND(s : string) TO display WHERE s = "done" 

— error messages 

— Input formats 

CONCEPT addji lght(command: string, i: fiightjd, p: money, 
o d: airport, dep arr: time, cn: nat) 

VALUE(b: boolean) 

WHERE b <=> S0ME(cap : string SUCH THAT cn = nat(cap) :: command = ilst("a", i, p, o, d, 
dep, arr, cap) ) 

CONCEPT drop f I ight(command: string, i: flight id) 

VALUE(b: boolean) 

WHERE b <=> command = iist("d", I) 

CONCEPT new fare(command: string, i: flight id, p: money) 

VALUE(b:“booiean) 

WHERE b <=> command = i i st ( "n” , i, p) 

END 
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SAMPLE OUTPUT 8 



MACHINE airi inejnanager 
INHERIT format 

IMPORT edit fiightjd money airport time 
FROM travel_agent 

STATE 

INVARIANT true 
INITIALLY true 

MESSAGE (command : string) — command from airline manager's keyboard 

WHEN add_f I ight (edit (command), I, price, origin, destination, departure, 
arrival, capacity) 

SEND addf 1 1 ght ( I : fiightjd, price : money, origin destination 

: airport, departure arrival : time, capacity : nat) 
TO air I ine_reservat ion_system 
WHEN drop_f i ight(edit(command), I) 

SEND dropj i I ght ( i : fiightjd) 

TO a lr I lne_reservat Ion system 
WHEN newJare(edlt(command), I, price) 

SEND new_fare(i : f I i ght_ i d , price : money) 

TO airline reservation system 
OTHERWISE 

REPLY (s : string) 

WHERE s = "command not recognized" — normal responses 



MESSAGE done 

SEND (s : string) 

TO display 

WHERE s = "done" — error messages 
— input formats 



CONCEPT add J I lght(command : string, i : fiightjd, p : money, o d : airport, 
dep arr : time, cn : nat) 

VALUE (b : boolean) 

WHERE b 

<-> SOME(cap : string SUCH THAT cn - nat(cap) 

command = 1 1 st ( “a ” , I, p, o, d, dep, arr, cap)) 

CONCEPT drop f i lght(command : string, i : fiightjd) 

VALUE (b 7 boolean) 

WHERE b <=> command = iist(“d“ , i) 

CONCEPT new fare(command : string, I : fiightjd, p : money) 

VALUE (b~: boolean) 

WHERE b <=> command = listen*, i, p) 
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END 
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SAMPLE INPUT 9 



TYPE unlon{$s: type) WHERE d i st i net < i dent if iers(s)) 

— A union type Is a tagged disjoint union of a set of types. 

— Two union types are the same Iff they have the same 

— actual parameters WITH THE SAME FIELD NAMES. 

— ident If iers(s) is the sequence of identifiers used as 

— field names In the actual parameter list. 

iNHERlT equal lty{unlon{$s}} 

IMPORT Identifiers identifier FROM fieid_names IMPORT distinct FROM sequenced dent if ier) 

MODEL (tag : Identifier, value: any) 

INVARIANT ALL(U: union{$s) :: u.tag IN Ident if iers(s)), 

ALL(u: unlon{$s} :: u. value IN type_of (u.tag)) 

MESSAGE createfid: Identifier) WHERE Id IN Ident if iers(s) (x: any) 

— literal (t : : v) = create(t)(v) 

WHEN X IN type of ( Id) REPLY(u.- unlon(Ss)) WHERE u.tag = id & u. value = x 

OTHERWISE REPLY EXCEPTION type_error 

MESSAGE is{ i d : Identifier) WHERE id IN ident i f iers(s) (u: oneof{$s)) 

REPLY (b : boolean) WHERE b <-> u.tag = Id 

— Check If you have a given variant. 

MESSAGE get {Id: Identifier) WHERE Id IN Ident If lers(s) (U: oneof{$s)) OPERATOR . 
when u.tag = Id 

CH00SE(rt : type SUCH THAT rt = type_of ( id)) 

REPLY(X: rt) WHERE x = u. value 
OTHERWISE REPLY EXCEPTION type_error 

— Extract the value assuming a given variant, 

— succeeds only if the tag matches the assumed variant. 

MESSAGE equalful u2: unlon(Ss)) 

REPLY(b: boolean) 

WHERE b <=> ul.tag = u2.tag & ul. value = u2. value 

CONCEPT type of ( Id: Identifier) 

WHERE Id"lN Ident If lers(s) 

VALUE(t : type) 

-- The type corresponding to the id in the formal parameter list s. 

WHERE S0ME(n : nat :: t = s[n] & Id = ident if iers(s)[n]) 

END 
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SAMPLE OUTPUT 9 



TYPE unlon($s: type} 

WHERE d I st I net ( I dent I f I ers(s) ) 

— A union type Is a tagged disjoint union of a set of types. 

— Two union types are the same Iff they have the same 

— actual parameters WITH THE SAME FIELD NAMES. 

— Ident If lers(s) Is the sequence of Identifiers used as 

— field names In the actual parameter list. 

INHERIT equal lty{unlon{$s}} 

IMPORT Identifiers Identifier 
FROM field names 
IMPORT distinct 

FROM sequence{ Ident If ler) 

MODEL (tag : Identifier, value : any) 

INVARIANT ALL C u : union{$s) :: u.tag IN I dent I f lers(s)), 

ALL(u : unlon{Ss} :: u. value IN type_of (u.tag)) 

MESSAGE create{ id : Identifier) 

WHERE id IN Ident If lers(s) 

(x : any) — literal (t :: v) = create{t)(v) 

WHEN x IN type_of ( Id) 

REPLY (u : unlon{$s}) 

WHERE u.tag = Id & u. value = x 
OTHERWISE 

REPLY EXCEPTION type_error 

MESSAGE ls( Id : Identifier) 

WHERE id IN ident If iers(s) 

(u : oneof($s}) 

REPLY (b : boolean) 

WHERE b <=> u.tag = Id — Check If you have a given variant. 



MESSAGE get C Id : Identifier) 

WHERE Id IN Ident If lers(s) 

(u : oneof{$s}) OPERATOR . 

WHEN u.tag = Id 

CH00SE(rt : type SUCH THAT rt = type of (id)) 
REPLY (x : rt) 

WHERE x = u. value 
OTHERWISE 

REPLY EXCEPTION type_error 

— Extract the value assuming a given variant, 

— succeeds only If the tag matches the assumed variant. 



194 



MESSAGE equal(u1 u2 : union($s}) 

REPLY (b : boolean) 

WHERE b <=> ul.tag = u2.tag & ul. value = u2. value 

CONCEPT type_of ( Id : Identifier) 

WHERE id IN | dent If lers(s) 

VALUE (t : type) 

— The type corresponding to the Id In the formal parameter list s. 

WHERE SOME (n : nat : : t = s[n] & Id = 1 dent If lers(s)[n]) 

END 



195 



SAMPLE INPUT 10 



MACHINE travel_agent Jnterface IMPORT flight FROM alrl InejnanagerJnterface 

STATE(reservat Ions: set{reservat ion), schedule: map{f I Ightld, flight}) 
INVARIANT exist lng_f I lghts(reservat Ions) , no_overbook lng(reservat Ions) 
INITIALLY reservations = { } 

MESSAGE find f I lghts(or Ig In destination: airport) — G1.1.1, G1.1.2 
REPLY f I lghts(s: set{f I Ight}) 

WHERE ALL ( f : flight :: f IN s <=> f IN range(schedule)& f. origin = origin 
& f .destination - destination ) 

— flights from the origin to the destination 
MESSAGE reserved: fllghtjd, d: date, p: passenger) — G1.2 
WHEN I IN schedule & booklngsd, d) < schedule[ I ] .capacity 

& “([Id:: I, d:: d, p:: p] IN ’reservations) — seat available 
REPLY done 

TRANSITION reservations = ’reservations U {[Id:: I, d:: d, p:: p]} 

— add reservation 

WHEN [Id:: I, d : : d, p:: p] IN ’reservations 
REPLY EXCEPTION reservatlon_exlsts 
WHEN "(I IN schedule) — unknown flight 
REPLY EXCEPTION no such flight 
OTHERWISE REPLY EXCEPT 1 0N~no_seat 
MESSAGE canceld: flight Id, d: date, p: passenger) -- G1.3 
WHEN I IN schedule & [Id:-, l, d:: d, p: : p] IN reservations 
-- reservation found 
REPLY done 

TRANSITION reservations = ’reservations - {[id:: I, d-.: d, p:: p]} 

— remove reservation 

WHEN "(i IN schedule) — unknown flight 
REPLY EXCEPTION no such flight 
OTHERWISE REPLY EXCEPT I ON~no_reservat Ion 
CONCEPT existing fllghts(s: set{reservat Ion}) 

VALUE (b : boolean) 

WHERE ALL(r : reservation SUCH THAT r IN s :: r. fllghtjd IN schedule) 
CONCEPT no overbooklng(s: set{reservat Ion}) 

VALUE(b:“boolean) 

WHERE ALL( I : f I Ightld, d: date SUCH THAT I IN schedule 
:: booklngsd, d) <= schedu I e[ I]. capacity ) 

CONCEPT booklngsd: flight Id, d: date) 

VALUE(n: nat) 

WHERE n = NUMBER ( r : reservation 

SUCH THAT r IN reservations &r.id=l&r.d=d ::r) 

CONCEPT reservation: type 

WHERE reservation = tup I e{ I d : : flight Id, d:: date, p.-: passenger} 

END 
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SAMPLE OUTPUT 10 



MACHINE travel agent interface 
IMPORT flight 

FROM alri ine_iianager_lnterface 

STATE (reservations : setfreservation}, schedule : nap[f I ight_id, flight}) 
INVARIANT exist ing_f I ights(reservat ions) , no_overbooking(reser vat ions) 
INITIALLY reservations = {} 

MESSAGE f ind f I lghts(orlgin destination : airport) — G1.1.1, G1.1.2 

REPLY f I lghts(s : set{f light}) 

WHERE ALL ( f : flight 
:: f IN s 

<=> f IN range(schedule) & f. origin = origin 
& f .destination = destination) 

— flights from the origin to the destination 



MESSAGE reserved fiight_id, d : date, p : passenger) — G1.2 

WHEN i IN schedule & booklngsd, d) < scheduled]. capacity 

i '([id :: I, d :: d, p • p] IN ‘reservations) — seat available 

REPLY done 

TRANSITION reservations = ‘reservations U {[id :: I, d :: d, p :: p]} 

— add reservation 

WHEN [Id :: I, d :: d, p :: p] IN ‘reservations 
REPLY EXCEPTION reservat ion_ex Ists 
WHEN '"(I IN schedule) — unknown flight 

REPLY EXCEPTION nosuchf I Ight 
OTHERWISE 

REPLY EXCEPTION no_seat 

MESSAGE cance l( i : fiightjd, d : date, p : passenger) — G1.3 

WHEN I IN schedule & [Id :: i, d :: d, p :: p] IN reservations 
-- reservation found 

REPLY done 

TRANSITION reservations = ‘reservations - {[id :: i, d :: d, p :: p]} 

— reiove reservation 

WHEN "(I IN schedule) — unknown flight 

REPLY EXCEPTION no such flight 
OTHERWISE 
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REPLY EXCEPTION no_reservat ion 

CONCEPT ex I st i ng_f 1 1 ghts(s : setfreservat ion}) 

VALUE (b boolean) 

WHERE ALL C r : reservation SUCH THAT r IN s :: r.fllghtjd IN schedule) 

CONCEPT no_overbooking(s : set{reservatlon}) 

VALUE (b : boolean) 

WHERE ALL C I : filflhtjd, d : date SUCH THAT I IN schedule 
:: bookings(i, d) <= schedu let I ] . capacity) 

CONCEPT bookings (I s fiight_id, d : date) 

VALUE (n : nat) 

WHERE n 

= NUMBER(r : reservation 

SUCH THAT r IN reservations & r. id = I & r.d = d : : r) 
CONCEPT reservation: type 

WHERE reservation = tuple{id :: filghtjd, d :: date, p :: passenger} 
END 
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SAMPLE INPUT 11 



TYPE real 

INHERIT numberfreal) 

INHERIT tota lorderCrea I } 

MODEL 

INVARIANT true 

MESSAGE rati ona I _to_rea I (r 1 : rational) 

— type conversion operation for mixed mode arithmetic 
REPLY ( r 2 : real) 

WHERE ratlonaltoreal(zero) = zero, rat Iona l_to_rea I (one) = one, 

ALL(x y: rational :: ratlonal_to_real(x - yj = ratlonal_to_real(x) - 
ratlonal_to real(y)), 

ALL (x y: rational SUCH THAT y "= zero *.: ratlonal_to_real(x / y) = 
ratlonal_to_real(x) / rat Iona I _to_rea I (y ) ) 

MESSAGE I nteger_to_r ea 1(1: Integer) 

— type conversion operation for mixed mode arithmetic 
REPLY ( r : real) 

WHERE r = rational _to_rea I ( l nteger_to_rat I ona I erat I ona I ( I ) ) 

MESSAGE nat_to_real(n: nat) 

-- type conversion operation for mixed mode arithmetic 
REPLY ( r : real) 

WHERE r = ratlonal_to_real(nat_to_ratlonal§ratlonal(n)) 

MESSAGE ratlonal(r: real) 

REPLY (b: boolean) 

WHERE S0ME( I : Integer :: r = rat I ona I _to_rea 1(1)) 

MESSAGE Integrator: real) 

REPLY(b : boolean) 

WHERE S0ME(l: Integer :: r - I nteger_to_r ea 1(1)) 

MESSAGE nat(r : real) 

REPLY (b : boolean) 

WHERE S0ME(n : nat :: r = nat_to_rea I (n)) 

MESSAGE zero 
-- I Itera 10.0- zero 
REPLY ( I : real) 

MESSAGE one 
— I Itera I 1.0 = one 
REPLY ( I : real) 

MESSAGE mlnus(r1: real) OPERATOR - 
REPLY ( r 2 : real) 
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WHERE r2 = 0.0 - rl 



MESSAGE plus(r1 r2: real) OPERATOR + 

REPLY ( r 3 : real) 

MESSAGE dlfference(r1 r2: real) OPERATOR - 
REPLY ( r 3 : real) 

WHERE rl = r2 + r3 

MESSAGE 1 1 mes(r 1 r2: real) OPERATOR * 

REPLY ( r 3 : real) 

MESSAGE quot Ient(r1 r2: real) OPERATOR / 

WHEN r2 "= zero 
REPLY ( r 3 : real) 

WHERE rl = r2 » r3 

OTHERWISE REPLY EXCEPTION dlvlde_by_zero 

MESSAGE rema Inder(r1 r2: real) OPERATOR \ MOD 
WHEN r2 "= zero 
REPLY(r : real) 

WHERE SOME (q : real : : rl = q * r2 + r & abs(r2) > r >= zero & Integra I (q) ) 
OTHERWISE REPLY EXCEPTION d Iv lde_by_zero 

MESSAGE exptCrl r2: real) OPERATOR ** 

WHEN (rl = 0.0 & r2 <= 0.0) | (rl < 0.0 & "Integra I (r2)) 

REPLY EXCEPTION undef lned_expt 
OTHERWISE REPLY ( r 3 : real) 

WHERE ALL ( r : real :: r »* 1.0 = r), ALL ( r : real SUCH THAT r > 0.0 : : 0.0 
** r = 0.0), 

ALL ( r x y : real SUCH THAT r > 0.0 j r < 0.0 & Integral(x) & Integra I (y) 

:: r ** (x + y) = (r ** X) * (r ** y) ) 

MESSAGE equal(r1 r2: real) 

REPLY(b: boolean) 

MESSAGE I ess (r 1 r2: real) 

REPLY (b : boolean) 

WHERE ALL(x y: rational :: ratlonal_to_real(x) < ratlonal_to_real(y) <=> x < y), 

ALL(x y z: real : : x + y < x + z <=> y < z) , 

ALL(x y z: real SUCH THAT x > 0.0 :: x * y < x * z <=> y < z) , 

ALL(x y z: real SUCH THAT x < 0.0 : : x * y < x * z <=> y > z) 
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SAMPLE OUTPUT 11 



TYPE real 

INHERIT number(real) 

INHERIT total_order{real} 

MODEL 

INVARIANT true 

MESSAGE rat Iona l_to_real(r1 : rational) 

— type conversion operation for mixed mode arithmetic 

REPLY ( r 2 : real) 

WHERE rat Iona l_to_real (zero) = zero, ratlonal to real(one) = one, 
ALL(x y : rational 

:: ratlonal_to_real(x - y) 

= ratlonal_to real(x) - rational to real(y)), 

ALL(x y : rational SUCH THAT y *= zero " 

:: ratlonal_to_real(x / y) 

= ratlonal_to_real(x) / ratlonal_to_real(y)) 

MESSAGE I nteger_to_rea I ( I : Integer) 

— type conversion operation for mixed mode arithmetic 

REPLY (r : real) 

WHERE r = rat I ona I _t o_r ea I ( I nt eger_t o_rat I ona I erat I ona I ( I ) ) 

MESSAGE nat_to_real(n : nat) 

— type conversion operation for mixed mode arithmetic 

REPLY (r : real) 

WHERE r = rat Iona l_to_rea I (nat_to_rat Iona I erat Iona I (n)) 

MESSAGE rat Iona I (r : real) 

REPLY (b : boolean) 

WHERE S0ME(l : Integer :: r = rat I ona I _to_rea 1(1)) 

MESSAGE Integral^ : real) 

REPLY (b : boolean) 

WHERE S0ME(l : Integer :: r = I nteger _to_rea I ( i )) 

MESSAGE nat(r : real) 

REPLY (b : boolean) 

WHERE S0ME(n : nat : : r = nat_to_rea I (n)) 

MESSAGE zero — literal 0.0 * zero 
REPLY (I : real) 

MESSAGE one — literal 1.0 = one 
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REPLY (i : reai) 



MESSAGE minus(r1 : reai) OPERATOR - 
REPLY (r2 : reai) 

WHERE r2 = 0.0 - rl 

MESSAGE p i us ( r 1 r2 : reai) OPERATOR + 

REPLY (r3 : reai) 

MESSAGE differences r2 : real) OPERATOR - 
REPLY (r3 : real) 

WHERE rl = r2 + r3 

MESSAGE t i mes ( r 1 r2 : reai) OPERATOR * 

REPLY (r3 : reai) 

MESSAGE quot ient(r1 r2 : real) OPERATOR / 

WHEN r2 "= zero 
REPLY (r3 : real) 

WHERE rl = r2 * r3 
OTHERWISE 

REPLY EXCEPTION d!vlde_by_zero 

MESSAGE rema Inder(r1 r2 : reai) OPERATOR MOD MOD 
WHEN r2 "= zero 
REPLY (r : reai) 

WHERE SOME ( q : reai 

:: rl = q * r2 + r & abs(r2) > r >= zero & i ntegra I (q ) ) 

OTHERWISE 

REPLY EXCEPTION d lvlde_by_zero 

MESSAGE expt(r1 r2 : reai) OPERATOR ** 

WHEN (rl = 0.0 & r2 <= 0.0) ! (rl < 0.0 & “ integra i (r2)) 

REPLY EXCEPTION undefined expt 
OTHERWISE 

REPLY (r3 : reai) 

WHERE ALL ( r : reai :: r ** 1.0 = r), 

ALL(r : real SUCH THAT r > 0.0 :: 0.0 ** r = 0.0), 

ALL ( r x y : real 

SUCH THAT r > 0.0 ! r < 0.0 & Integra i (x) & Integra I (y) 
:: r ** (x + y) = (r ** x) * (r ** y)) 

MESSAGE equa I (r 1 r2 : real) 

REPLY (b : boolean) 

MESSAGE Iess(r1 r2 : real) 

REPLY (b : boolean) 

WHERE ALL ( x y : rational 

:: rat I ona Itorea I (x) < rat I ona Itorea I (y) <=> x < y), 
ALL(x y z : real : : x + y < x + z <=> y < z). 
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y < z), 
y > z) 



END 



ALL(x y 
ALL(x y 



real SUCH THAT x > 0.0 
real SUCH THAT x < 0.0 



y < x » z <=> 
y < x * z <=> 
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SAMPLE INPUT 12 



TYPE complex INHERIT numberfcompiex} 

MODEL(re [ m : real) 

INVARIANT true 

MESSAGE real_to_complex(r: real) 

— type conversion operation for mixed mode arithmetic 
REPLY (c : complex) 

WHERE c.re = r, c. Im = 0.0 
MESSAGE rationai_to_compiex(r: rational) 

— type conversion operation for mixed mode arithmetic 
REPLY (c : complex) 

WHERE c = reai_to_compiex(rationai_to_reaiereai(r)) 
MESSAGE integer_to_compiex( I : integer) 

— type conversion operation for mixed mode arithmetic 
REPLY (c : complex) 

WHERE c = real to compiex( integer_to_rea I8rea I ( i )) 
MESSAGE nat_to_compiex(n: nat) 

— type conversion operation for mixed mode arithmetic 
REPLY(c : complex) 

WHERE c = reai_to_compiex(nat_to_real§real(n)) 

MESSAGE real(c: complex) 

REPLY (b : boolean) 

WHERE b <=> c. im = 0.0 

MESSAGE I mag I nary(c : complex) 

REPLY (b : boolean) 

WHERE b <=> c.re = 0.0 

MESSAGE rationai(c: complex) 

REPLY (b : boolean) 

WHERE S0ME(r : rational : : c = rat iona i_to_comp iex(r)) 

MESSAGE integra I (c : complex) 

REPLY (b : boolean) 

WHERE SOME ( I : Integer :: c = integer_to_comp lex( i )) 

MESSAGE nat(c: complex) 

REPLY (b : boolean) 

WHERE SOME (n : nat : : c = nat_to_comp lex(n)) 

MESSAGE zero 
REPLY (c : complex) 

WHERE c = reai_to_compiex(0.0) 

MESSAGE one 

REPLY (c : complex) 

WHERE c = real_to_compiex(1 .0) 

MESSAGE I 
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REPLY(c: complex) 

WHERE I * I = - one 

MESSAGE conjugate(c1 : complex) 

REPLY(c2: complex) 

WHERE c2.re = cl. re, c2.im = -cl.im 

MESSAGE magnltude(c1 : complex) 

REPLY ( r : real) 

WHERE r = (c.re ** 2 + c.lm ** 2) *» 0.5 

MESSAGE nlnus(c1: complex) OPERATOR - 
REPLY(c2: complex) 

WHERE c2 = 0.0 - cl 

MESSAGE p I US (cl C2: complex) OPERATOR + 

REPLY(c3: complex) 

WHERE c3.re = cl. re + c2.re, c3.im = cl.im + c2.lm 

MESSAGE differences c2: complex) OPERATOR - 
REPLY(c3: complex) 

WHERE cl = c2 + c3 

MESSAGE 1 1 mes (c T c2: complex) OPERATOR * 

REPLY (c3 : complex) 

WHERE c3.re = cl. re * c2.re - cl.im * c2.lm, 
c3.lm = cl. re * c2.lm + cl.im * c2.re 

MESSAGE quotlent(c1 c2: complex) OPERATOR / 

WHEN c2 '« zero 
REPLY(c3: complex) 

WHERE cl = c2 * c3 

OTHERWISE REPLY EXCEPTION dlvlde_by_zero 

MESSAGE exptfcl c2: complex) OPERATOR •• 

WHEN (cl = zero & c2.re <= 0.0) 

REPLY EXCEPTION undefined expt 
OTHERWISE REPLY (c3 : complex) 

WHERE ALL (c : complex :: c ** one = c), ALL(c: complex SUCH THAT c.re > 0.0 :: zero 
** c = zero), 

ALL(c x y: complex SUCH THAT c _ = zero 

: : c ** (x + y) = (c ** x) * (c ** y) ) 

MESSAGE equaKcl c2: complex) 

REPLY(b: boolean) 

WHERE b <=> cl. re = c2.re & cl.im * c2.lm 
END 
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SAMPLE OUTPUT 12 



TYPE complex 

INHERIT number{complex} 

MODEL (re Im : real) 

INVARIANT true 

MESSAGE real_to_complex(r : real) 

— type conversion operation for mixed mode arithmetic 

REPLY (c : complex) 

WHERE c.re = r, c.lm = 0.0 

MESSAGE rat Iona l_to_complex(r : rational) 

— type conversion operation for mixed mode arithmetic 

REPLY (c : complex) 

WHERE c = real_to_complex(ratlonal_to_real§real(r)) 

MESSAGE lnteger_to_complex( i : Integer) 

-- type conversion operation for mixed mode arithmetic 

REPLY (c : complex) 

WHERE c = real_to_complex( lnteger_to_rea l@rea I ( 1)) 

MESSAGE nat_to_complex(n : nat) 

— type conversion operation for mixed mode arithmetic 

REPLY (c : complex) 

WHERE c = real_to_complex(nat_to_realereal(n)) 

MESSAGE real(c : complex) 

REPLY (b : boolean) 

WHERE b <=> c. im = 0.0 

MESSAGE lmaginary(c : complex) 

REPLY (b : boolean) 

WHERE b <=> c.re = 0.0 

MESSAGE rationale : complex) 

REPLY (b : boolean) 

WHERE S0ME(r : rational :: c = ratlonal_to complex(r)) 

MESSAGE Integral (c : complex) 

REPLY (b : boolean) 

WHERE S0ME(l : Integer :: c = lnteger_to_comp lex( I )) 

MESSAGE nat(c : complex) 

REPLY (b : boolean) 
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WHERE SOME(n : nat :: c = nat_to_coraplex(n)) 

MESSAGE zero 

REPLY (c : complex) 

WHERE c = real_to_complex(0.0) 

MESSAGE one 

REPLY (c : complex) 

WHERE c = real_to_complex(1 .0) 

MESSAGE I 

REPLY (c : complex) 

WHERE 1*1= -one 

MESSAGE conJugate(c1 : complex) 

REPLY (c2 : complex) 

WHERE c2.re = cl. re, c2.lm = -cl.lm 

MESSAGE magnitude(c1 : complex) 

REPLY (r : real) 

WHERE r = (c.re ** 2 + c.lm ** 2) ** 0.5 

MESSAGE mlnus(c1 : complex) OPERATOR - 
REPLY (c2 : complex) 

WHERE c2 = 0.0 - Cl 

MESSAGE p I US (Cl C2 : Complex) OPERATOR + 

REPLY (c3 : complex) 

WHERE c3.re = cl. re + c2.re, c3.lm = cl.lm + c2.im 

MESSAGE dlfference(c1 c2 : complex) OPERATOR - 
REPLY (c3 : complex) 

WHERE cl = c2 + c3 

MESSAGE tlmes(c1 c2 : complex) OPERATOR * 

REPLY (c3 : complex) 

WHERE c3.re = cl. re * c2.re - cl.lm * c2.im, 
c3.lm = cl. re * c2.lm + cl.lm * c2.re 

MESSAGE quot I ent (cl c2 : complex) OPERATOR / 

WHEN c2 '= zero 

REPLY (C3 : complex) 

WHERE cl = c2 * c3 
OTHERWISE 

REPLY EXCEPTION dlvlde_by_zero 

MESSAGE expt(c1 c2 : complex) OPERATOR ** 

WHEN (cl = zero & c2.re <= 0.0) 

REPLY EXCEPTION undefined expt 
OTHERWISE 

REPLY (c3 : complex) 
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WHERE ALL(c : complex :: c ** one = c), 

ALL(c : complex SUCH THAT c.re > 0.0 :: zero ** 
ALL(c x y : complex SUCH THAT c "= zero 
:: c ** (x + y) = (c ** x) * (c ** y)) 

MESSAGE equal(c1 c2 : complex) 

REPLY (b : boolean) 

WHERE b <*> cl. re = c2.re & cl.lm = c2.lm 
END 



c = zero). 
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SAMPLE INPUT 13 



TYPE sequenceCt: type) 

INHERIT equal lty{sequence{t}} 

INHERIT total_order(sequence(t}} 

EXPORT sorted distinct permutation frequency 
MODEL 

— generated by (empty, add} 

INVARIANT true 

MESSAGE empty 

— I Itera I [ ] = empty 
REPLY (s : sequence(t}) 

MESSAGE add(x: t, si: sequence(t)) 

— literal [x] - add(x, empty) 

— I Iteral [x, $s] = add(x, s) 

REPLY(s2: sequence(t}) 

MESSAGE remove(x: t, $1: sequence(t)) 

— Remove all Instances of x from s. 

REPLY(s2: sequence(t)) 

WHERE AL L (x : t :: remove(x, empty) = empty), 

ALL(x: t, s: sequence(t) :: remove(x, add(x, s)) = remove(x, s)), 
ALL ( x y: t, S: sequence(t) SUCH THAT x "= y 
:: remove(x, add(y, s)) = add(y, remove(x, s)) ) 

MESSAGE append(s1 s2: sequence(t}) OPERATOR Ji 

— literal [Ssl, $s2] = append(s1, s2) 

REPLY(s2: sequence{t}) 

WHERE ALL(s: sequence(t) :: append(empty, s) = s), 

ALL (x : t, si s2: sequence(t) 

:: append(add(x, si), s2) = add(x, append(s1, s2)) ) 

MESSAGE fetch(s: sequence(t}, n: nat) OPERATOR [ 

— fetch(s, n) = s[n] 

WHEN 1 <= n <= length(s) 

REPLY(X: t) 

WHERE ALL ( x : t, s: sequence(t) :: fetch(add(x, s), 1) = x), 

AL L (n : nat, X: t, s: sequence(t} SUCH THAT n > 1 
:: fetch(add(x, s), n) = fetch(s, n - 1) ) 

OTHERWISE REPLY EXCEPTION bounds_error 

MESSAGE fetch(s 1 : sequence(t), s2: sequence(nat)) OPERATOR [ 

REPLY ( s3 : sequence(t)) 

WHERE Iength(s3) = Iength(s2), 

ALL(n : nat SUCH THAT n IN domaln(s2) :: s3[n] = sl[s2[n]]) 

MESSAGE length(s: sequence(t)) 

REPLY(n: nat) 
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WHERE iength(empty) = 0, 

ALL(x: t, s: sequence(t) : : iength(add(x, s)) = iength(s) + 1) 

MESSAGE domain(s: sequence{t}) 

REPLY (d : set{nat}) 

WHERE d = {1 .. iength(s)} 

MESSAGE member(x: t, S: sequence(t)) OPERATOR IN 
REPLY (b : boolean) 

WHERE b <=> SOME(n : nat SUCH THAT n IN domain(s) :: s[n] = x) 

MESSAGE equai(s1 s2: sequence{t}) 

REPL Y(b : boolean) 

WHERE b <=> ALL (n : nat :: s1[n] = s2[n]) 

MESSAGE Iess(s1 s2: sequence{t}) 

— iexicographic ordering (dictionary ordering on strings) 

WHEN has_operation(t, iess) & part ia i_order ing( iesset) 

REPLY Cb : boolean) 

WHERE ALL(s: sequence(t), X: t :: [ ] < [x, $s]) f 
ALL(s1 s2: sequence(t), xl x2: t 

:: [Xl, SSI] < [X2, $S2] <=> Xl < X2 | Xl = X2 & Si < S2 ) 

OTHERWISE REPLY EXCEPTION operat ion_not_appi (cable 

MESSAGE subsequence(s1 s2: sequence(t)) 

REPLY (b : boolean) 

— True If the elements of si are embedded in s2, in the same order. 
WHERE ALL (s : sequence{t} :: subsequence([ ], $)), 

ALL(s1 s2 : sequence{t), X: t :: subsequence([x, Ssl], s2) 

<=> S0ME(s3 s4: sequence(t) 

: : s2 = [Ss3, x, Ss4] & subsequence(s1 , s4) )) 

MESSAGE interval (xl x2: t) OPERATOR .. 

WHEN subtype(t, totai_order) 

REPLY(s : sequence(t)) 

WHERE sorted{ iess)(s) & ALL (x : t : : x IN s <=> xl <= x <= x2) 
OTHERWISE REPLY EXCEPTION operat ion_not_appi icabie 

MESSAGE appiy(f: FUNCTION, si: sequence(t)) 

WHEN domaln(f) = [t] 

CH00SE(rt : type SUCH THAT rt = range(f)) 

REPLY(s2: sequence(rt)) 

WHERE 1 ength (s2) = iength(sl), 

ALL(n: nat SUCH THAT n IN domain(sl) :: s2[n] = f(s1[n])) 

OTHERWISE REPLY EXCEPTION type_error 

MESSAGE reduce(f: FUNCTION) 

WHERE domain(f) = [t, t] & range(f) = t 
& S0ME(X: t :: ALL (y : t :: f(y, x) = y)) 

(s: sequence(t)) 

REPLY (X : t) 
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WHERE IF s = [ ] THEN ALL (y : t :: f(y, x) = y) 

ELSE x = f(s[l], reduce(s[2 .. length(s)], f)) FI 

CONCEPT sortedfle: FUNCTION} WHERE t ota I order i ng ( le) 

(s: sequence{t}) 

V ALUE (b : boolean) 

WHERE b <=> ALL ( nl n2: nat SUCH THAT 1 <= nl < n2 <= length(s) 
:: Ie(s[n1], s[n2] ) ) 

CONCEPT dlstlnct(s: sequence{t}) 

V ALUE (b : boolean) 

WHERE b <=> ALL(n1 n2: nat SUCH THAT 1 <= nl < n2 <= length(s) 
:: s[n1] -» s[n2] ) 

CONCEPT permutat I on( si s2: sequence{t}) 

VALUE(b: boolean) 

WHERE b <=> ALL (x : t :: frequency(x, si) = frequency(x, s2)) 

CONCEPT frequency(x: t, s: sequence{t}) 

VALUE(n : nat) 

WHERE n = NUMBER (k : nat SUCH THAT s[k] = x :: k) 

END 
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SAMPLE OUTPUT 13 



TYPE sequence{t : type) 

INHERIT equal lty{sequence{t}} 

INHERIT total_order{sequence{t)} 

EXPORT sorted distinct permutation frequency 

MODEL — generated by [empty, add} 

INVARIANT true 

MESSAGE empty — literal [ ] = empty 
REPLY (s : sequence{t}) 

MESSAGE add(x : t, si : sequenced}) — literal [x] = add(x, empty) 

— I Iteral [x, $s] = add(x, s) 

REPLY (s2 : sequenced}) 

MESSAGE removed : t, si : sequenced}) 

— Remove all Instances of x from s. 

REPLY (s2 : sequenced}) 

WHERE ALL(x : t : : removed, empty) = empty), 

ALL(x : t, s : sequenced} 

:: removed, add(x, s)) = remove(x, s)), 

AL L ( x y : t, s : sequenced} SUCH THAT x '= y 

:: removed, add(y, s)) = add(y, remove(x, s))) 

MESSAGE append(s1 s2 : sequence{t}) OPERATOR || 

— literal [$s1, $s2] = append(s1, s2) 

REPLY (s2 : sequenced}) 

WHERE ALL(s : sequence{t} :: append(empty , s) = s), 

ALL(x : t, si s2 : sequenced} 

:: append(add(x, si), s2) = add(x, append(s1, s2))) 

MESSAGE fetches : sequenced}, n : nat) OPERATOR [ — fetch(s, n) = s[n] 

WHEN 1 <= n <= length(s) 

REPLY (x : t) 

WHERE AL L (x : t, s : sequenced} :: fetch(add(x, s), 1) = x), 
ALL(n : nat, x : t, s : sequenced} SUCH THAT n > 1 
:: fetch(add(x, s), n) = fetch(s, n - 1)) 

OTHERWISE 

REPLY EXCEPTION bounds_error 

MESSAGE fetch(s1 : sequenced}, s2 : sequence{nat}) OPERATOR [ 

REPLY (s3 : sequence{t}) 
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WHERE Iength(s3) = Iength(s2), 

ALL(n : nat SUCH THAT n IN domaln(s2) :: s3[n] = s1[s2[n]]) 

MESSAGE length(s : sequence{t}) 

REPLY (n : nat) 

WHERE length(empty) = 0, 

ALL(x : t, s : sequence{t) :: length(add(x, s)) = length(s) + 1) 

MESSAGE domaln(s : sequence(t)) 

REPLY (d : set(nat)) 

WHERE d = {1 .. length(s)} 

MESSAGE member(x : t, s : sequence(t)) OPERATOR IN 
REPLY (b : boolean) 

WHERE b <=> SOME(n : nat SUCH THAT n IN domain(s) :: s[n] = x) 

MESSAGE equal (si s2 : sequence{t}) 

REPLY (b : boolean) 

WHERE b <=> ALL(n : nat :: s1[n] = s2[n]) 

MESSAGE Iess(s1 s2 : sequence(t)) 

lexicographic ordering (dictionary ordering on strings) 

WHEN has_operat lon(t, less) & part I a I _order I ng ( I esset ) 

REPLY (b : boolean) 

WHERE ALL(s : sequence{t}, x : t :: [] < [x, $s]), 

ALL ( s 1 s2 : sequence(t), xl x2 : t 

:: [xl, $S1] < [x2, $s2] <=> x 1 < x2 ! X 1 = x2 & S 1 < s2) 

OTHERWISE 

REPLY EXCEPTION operat lon_not_appl I cab I e 

MESSAGE subsequence(s1 s2 : sequence(t)) 

REPLY (b : boolean) 

True If the elements of si are embedded In s2. In the same order. 

WHERE ALL (s : sequence(t) :: subsequence([], s)), 

ALL ( s 1 s2 : sequence{t), x : t 
:: subsequence([x, $s1], s2) 

<=> S0ME(s3 s4 : sequence(t) 

: : s2 = [$s3, x, $s4] & subsequence(s1 , s4))) 

MESSAGE I nterva I (xl x2 : t) OPERATOR .. 

WHEN subtype(t, total_order) 

REPLY (s : sequence(t)) 

WHERE sorted{ less}(s) & ALL(x : t : : x IN s <=> xl <= x <= x2) 
OTHERWISE 

REPLY EXCEPTION operat lon_not_app 1 1 cab le 

MESSAGE app I y( f : FUNCTION, si : sequence{t}) 

WHEN domaln(f) = [t] 

CH00SE(rt : type SUCH THAT rt = range(f)) 
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REPLY (s2 : sequence{rt)) 

WHERE Iength(s2) = length(sl), 

ALL(n : nat SUCH THAT n IN domain(sl) : : s2[n] = f(s1[n])) 

OTHERWISE 

REPLY EXCEPTION type_error 

MESSAGE reduced : FUNCTION) 

WHERE donialn(f) = [t, t] & range(f) = t 

& S0ME(X : t : : ALL(y : t :: f(y, X) • y)) 

(s : sequenceft)) 

REPLY (X : t) 

WHERE IF s = [] 

THEN ALL(y : t :: f(y, x) = y) 

ELSE x = f(s[1], reduce(s[2 .. length(s)], f)) FI 

CONCEPT SOrted{ le : FUNCTION) 

WHERE tota l_order lng( le)(s : sequence{t)) 

VALUE (b : boolean) 

WHERE b 

<=> ALL(n1 n2 : nat SUCH THAT 1 <- nl < n2 <= length(s) 
j§ Ie(s[n1], s[n2])) 

CONCEPT d 1st lnct(s : sequence(t)) 

VALUE (b : boolean) 

WHERE b 

<=> ALL(n1 n2 : nat SUCH THAT 1 <= nl < n2 <= length(s) 

:: s[n1] s[n2]) 

CONCEPT pernutatlon(s1 s2 : sequence(t)) 

VALUE (b : boolean) 

WHERE b <=> ALL(x : t :: frequency(x, si) = frequency(x, s2)) 

CONCEPT frequency(x : t, s : sequence{t)) 

VALUE (n : nat) 

WHERE n « NUMBER(k : nat SUCH THAT s[k] = X :: k) 
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SAMPLE INPUT 14 



MACHINE airl inejeservation_systen 

STATE (f I : map{fTlght_ld, flight), res: set{reservat Ion)) 

INVARIANT ALL ( r : reservation :: r IN res => r.id IN fi) 

INITIALLY donaln(fi) = { ), res = { ) 

— Interface to the travel_agent 
MESSAGE get f I Ight Info 

(from to: city, earliest departure iastest arrival: tine) 

REPLY (s : set{f light)) 

WHERE ALL ( f : flight 

:: f IN s <=> f. origin = fron & f .destination = to & 
f. departure >= ear I iest_departure & f. arrival <= latest_arrival ) 

MESSAGE reserve(nane: passenger. Id: flightjd, day: date) 

WHEN id IN fl & nunber res( Id, day, res) < f I [ id] . capacity & "has_res(nane, Id, day, res) 
REPLY(s: set{seat_ld))~ 

WHERE ALL (s I : seatjd :: si IN s <=> unass igned(s I , id, day, res) ) 

TRANSITION S0ME(r: reservation 

SUCH THAT r.who = nane & r.ld = id & r.when = day & r.seat = ! 

: : res = union(*res, (r))) 

WHEN id IN fi & has_res(nane, id, day) 

REPLY EXCEPTION prevlous_reservat ion 
WHEN '(Id IN fi) 

REPLY EXCEPTION invalid flight Id 
OTHERWISE REPLY EXCEPTION no_seatS_ava liable 

MESSAGE cancel jeservation( id: flightjd, day: date, nane: passenger) 

WHEN id IN fl & has_res(nane, id, day, res) 

REPLY(conf irnatlon: string) 

WHERE conf irnatlon = "reservation cancelled" 

TRANSITION res = ‘res - {find res(id, day, nane, res)) 

WHEN "(id IN fi) 

REPLY EXCEPTION invalid flight id 
OTHERWISE REPLY EXCEPTION nosuch jeservat Ion 

MESSAGE assign_seat 

(id: flightjd, day: date, nane: passenger, seat: seatjd) 

WHEN has_res(nane, id, day, res) & unassigned(seat, id, day, res) 

REPLY(conf irnatlon: string) 

TRANSITION f ind_res (id, day, nane, res). seat = seat 

WHEN has_res(nane, id, day, res) & "unass igned(seat, id, day, res) 

REPLY EXCEPTION seat_not_ava i iab ie 
OTHERWISE REPLY EXCEPTION no_such_reservat ion 

— interface to the air I inejnanager 

MESSAGE update_pr ice( id: flightjd, price: noney) 

WHEN id IN fi 

REPLY(conf irnation: string) 

TRANSITION f I [Id] . price = price 
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OTHERWISE REPLY EXCEPTION no_such_f I ight 

MESSAGE add_f I lght( id: fllghtjd, origin destination: airport, 

departure arrival: time, capacity: integer, price: money) 

WHEN "(Id IN fl) 

REPLY(conf Irmation: string) 

WHERE confirmation = "flight added” 

TRANSITION f I [ id] = createef I lght( Id, origin, destination, departure, 

arrival, capacity, price) 

OTHERWISE REPLY EXCEPTION f 1 1 ght a I r eady ex i st s 

MESSAGE drop_f I Ight ( Id: fllghtjd) 

WHEN Id IN fl 

REPLY(conf irmation: string) 

WHERE confirmation = "flight dropped" 

TRANSITION f I [ Id] = I 

OTHERWISE REPLY EXCEPTION no_such_f I Ight 

— concepts 

CONCEPT number_res( Id: fllghtjd, d: date, rs: set{reservat ion)) 

VALUE (n : Integer) 

— the number of reservations held for flight Id on day d 
WHERE SOME ( s : set{reservat Ion) SUCH THAT 

ALL (r : reservation :: r IN s <=> r IN rs & r.when = day & r. flight = id ) 
: : n = slze(s) ) 

CONCEPT has_res(name: passenger, Id: fllghtjd, day: date, rs: set{reservat Ion)) 

VALUE ( b : boolean) 

— true If the passenger holds a reservation on day for flight Id 
WHERE b <=> S0ME(r : reservation 

SUCH THAT r.who = name & r. flight = id & r.when = day 
: : r IN rs ) 

CONCEPT unasslgned(sl : seat id, Id: flight Id, day: date, rs: set(reservatlon)) 
VALUE(b: boolean) 

— true If no one holds a reservation for seat si on day for id 
WHERE b <=> ALL(r : reservation 

SUCH THAT r.seat = si & r.fllght = id & r.when = day 
:: “(r IN rs) ) 

CONCEPT reservation: type 

WHERE reservation = tuple{who :: passenger, when :: date, Id :: flightjd, 
seat :: seatjd ) 

CONCEPT city: type 

CONCEPT fllghtjd: type WHERE fllghtjd = string 

CONCEPT passenger: type WHERE passenger = string 

CONCEPT date: type CONCEPT seatjd: type WHERE seatjd = string 

CONCEPT money: type CONCEPT airport: type WHERE airport = string 

END TYPE flight MODEL (?) INVARIANT ? END 

TYPE time INHERIT total_order MODEL (?) INVARIANT ? END 
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SAMPLE OUTPUT 14 



MACH I NE a I r 1 1 ne_reservat i on_system 

STATE (fl : map{f light id, flight}, res : set{reservat ion}) 

INVARIANT ALL ( r : reservation :: r IN res => r.ld IN fl) 

INITIALLY domaln(fl) = {}, res = {} — Interface to the travel_agent 



MESSAGE get f 1 1 ght_ i nf o (f rom to : city, ear I lest jleparture lastest_arr Iva I 
: time) 

REPLY (s : set{f light}) 

WHERE ALL ( f : flight 
:: f IN S 

<=> f. origin = from & f .destination = to 
& f. departure >= ear I iest_departure 
& f. arrival <= latest_arrTval) 

MESSAGE reserve(name : passenger, Id : flight Id, day : date) 

WHEN Id IN fl & number_res( Id, day, res) < f I [ i d] . capacity 
& "has res(name, Id, day, res) 

REPLY (s": set(seatjd)) 

WHERE ALL(s I : seatjd :: si IN s <=> unass lgned(s i , Id, day, res)) 
TRANSITION S0ME(r : reservation 

SUCH THAT r.who = name & r.ld = Id & r.when = day 
& r.seat = I :: res = unlon(*res, {r})) 

WHEN Id IN fl & has_res(name. Id, day) 

REPLY EXCEPTION previous reservation 
WHEN "(Id IN fl) 

REPLY EXCEPTION Invalid fllghtjd 
OTHERWISE 

REPLY EXCEPTION no_seats_ava I lab le 

MESSAGE cancel reservat lon( Id : fllghtjd, day : date, name : passenger) 
WHEN Id IN fl & has_res(name. Id, day, res) 

REPLY (confirmation : string) 

WHERE confirmation = "reservation cancelled" 

TRANSITION res = *res - {f ind res( Id, day, name, res)} 

WHEN "(Id IN fl) 

REPLY EXCEPTION Inval Id flight Id 
OTHERWISE 

REPLY EXCEPTION no_such_reservat Ion 

MESSAGE ass I gn_seat ( I d : fllghtjd, day : date, name : passenger, seat 
: seat_ld) 

WHEN has_res(name, Id, day, res) & unasslgned(seat, Id, day, res) 

REPLY (confirmation : string) 

TRANSITION f I nd_res( Id , day, name, res). seat = seat 
WHEN has res(name, Id, day, res) & "unass lgned(seat, Id, day, res) 

REPL Y _ EXCEPT I ON seat not available 
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OTHERWISE 

REPLY EXCEPTION no_such_reservat Ion 
Interface to the a I r I inejnanager 



MESSAGE update pr I ce( I d : fllght_ld, price : money) 

WHEN Id IN fl 

REPLY (confirmation : string) 

TRANSITION f I [ Id] .price = price 
OTHERWISE 

REPLY EXCEPTION no_such_f I Ight 

MESSAGE add_f 1 1 ght ( Id : f 1 1 ght_ Id, origin destination : airport, departure 
arrival : time, capacity : Integer, price : money) 

WHEN '(Id IN fl) 

REPLY (confirmation : string) 

WHERE confirmation = "flight added" 

TRANSITION f I [ Id] 

= createef 1 1 ght ( Id, origin, destination, departure, arrival, 
capacity, price) 

OTHERWISE 

REPLY EXCEPTION f 1 1 ght_a I ready_ex I sts 

MESSAGE drop_f 1 1 ght ( I d : flight Id) 

WHEN Id IN fl 

REPLY (confirmation : string) 

WHERE confirmation = "flight dropped" 

TRANSITION f I ( Id] = I 
OTHERWISE 

REPLY EXCEPTION no_such_f I Ight — concepts 



CONCEPT number_res( id : fllghtjd, d : date, rs : set(reservat ion}) 

VALUE (n : Integer) 

the number of reservations held for flight Id on day d 

WHERE S0ME(s : set{reservat Ion) 

SUCH THAT ALL ( r : reservation 
:: r IN S 

<=> r IN rs & r.when = day & r. flight = Id) 

: : n = slze(s)) 

CONCEPT has_res(name : passenger. Id : fllghtjd, day : date, rs 
: set{reservat ion}) 

VALUE (b : boolean) 

true If the passenger holds a reservation on day for flight Id 
WHERE b 

<=> S0ME(r : reservation 

SUCH THAT r.who = name & r. flight = id & r.when = day 
:: r IN rs) 
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CONCEPT unasslgned(si : seatjd, id : f I i ght_ i d , day : date, rs 
: set{reservat ion}) 

VALUE (b : boolean) 

— true If no one holds a reservation for seat si on day for Id 
WHERE b 

<=> ALL ( r : reservation 

SUCH THAT r.seat = si & r. flight = Id & r.when = day 
:: "(r IN rs)) 

CONCEPT reservation: type 
WHERE reservation 

= tuple{who :: passenger, when :: date. Id :: fllghtjd, seat 
seatjd) 

CONCEPT City: type 

CONCEPT flight Id: type 
WHERE f 1 1 ght_ I d = string 

CONCEPT passenger: type 
WHERE passenger = string 

CONCEPT date: type 

CONCEPT seatjd: type 
WHERE seatjd = string 

CONCEPT money: type 

CONCEPT airport: type 
WHERE airport = string 
END 

TYPE flight 

MODEL (?) 

INVARIANT ? 

END 

TYPE time 

INHERIT total_order 

MODEL (?) 

INVARIANT ? 

END 
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